Quickjs Project Quickjs
2 CVEs affecting Quickjs Project Quickjs. Latest disclosed: 2025-04-27. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-46688 | Medium | 5.6 | 2025-04-27 | quickjs-ng through 0.9.0 has an incorrect size calculation in JS_ReadBigInt for a BigInt, leading to a heap-based buffer overflow. QuickJS before 2025-04-26 is… |
CVE-2025-46687 | Medium | 5.6 | 2025-04-27 | quickjs-ng through 0.9.0 has a missing length check in JS_ReadString for a string, leading to a heap-based buffer overflow. QuickJS before 2025-04-26 is also a… |