Quickjs

7 CVEs across 1 Quickjs products. Browse Quickjs vulnerabilities, severities, and proof-of-concept exploits.

Quickjs products with known CVEs

ProductCVEs
Quickjs7
Quickjs CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-62496High8.82025-10-16A vulnerability exists in the QuickJS engine's BigInt string parsing logic (js_bigint_from_string) when attempting to create a BigInt from a string with an exc…
CVE-2025-62495High8.82025-10-16An integer overflow vulnerability exists in the QuickJS regular expression engine (libregexp) due to an inconsistent representation of the bytecode buffer size…
CVE-2025-62494High8.82025-10-16A type confusion vulnerability exists in the handling of the string addition (+) operation within the QuickJS engine. * The code first checks if the left-h…
CVE-2025-62493Medium6.52025-10-16A vulnerability exists in the QuickJS engine's BigInt string conversion logic (js_bigint_to_string1) due to an incorrect calculation of the required number of…
CVE-2025-62492Medium6.52025-10-16A vulnerability stemming from floating-point arithmetic precision errors exists in the QuickJS engine's implementation of TypedArray.prototype.indexOf() when a…
CVE-2025-62491High8.82025-10-16A Use-After-Free (UAF) vulnerability exists in the QuickJS engine's standard library when iterating over the global list of unhandled rejected promises (ts->re…
CVE-2025-62490High8.82025-10-16In quickjs, in js_print_object, when printing an array, the function first fetches the array length and then loops over it. The issue is, printing a value is n…