CVE-2026-88362: n/a
MuJS e892c9fdb contains an incorrect numeric conversion vulnerability in jsR_isindex() in jsrun.c. A specially crafted JavaScript input containing an excessively large numeric array index can cause an out-of-range floating-point value to be converted to an integer without proper range validation. This results in undefined behavior and can cause process termination, leading to denial of service.
AI Analysis
Technical Summary
The vulnerability in MuJS e892c9fdb arises from improper numeric conversion in the jsR_isindex() function within jsrun.c. When processing a JavaScript input containing an excessively large numeric array index, the code converts an out-of-range floating-point value to an integer without validating the range. This improper handling causes undefined behavior that can terminate the process, effectively causing a denial of service.
Potential Impact
Exploitation of this vulnerability can cause the MuJS process to terminate unexpectedly, resulting in denial of service. There is no indication of code execution or data corruption beyond process termination.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid processing untrusted JavaScript inputs that may contain excessively large numeric array indices.
CVE-2026-88362: n/a
Description
MuJS e892c9fdb contains an incorrect numeric conversion vulnerability in jsR_isindex() in jsrun.c. A specially crafted JavaScript input containing an excessively large numeric array index can cause an out-of-range floating-point value to be converted to an integer without proper range validation. This results in undefined behavior and can cause process termination, leading to denial of service.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in MuJS e892c9fdb arises from improper numeric conversion in the jsR_isindex() function within jsrun.c. When processing a JavaScript input containing an excessively large numeric array index, the code converts an out-of-range floating-point value to an integer without validating the range. This improper handling causes undefined behavior that can terminate the process, effectively causing a denial of service.
Potential Impact
Exploitation of this vulnerability can cause the MuJS process to terminate unexpectedly, resulting in denial of service. There is no indication of code execution or data corruption beyond process termination.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid processing untrusted JavaScript inputs that may contain excessively large numeric array indices.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- mitre
- Date Reserved
- 2026-09-10T00:00:00.000Z
- State
- PUBLISHED
Threat ID: 6ab54645f7a7c541067fcbb3
Added to database: 09/24/2026, 15:48:21 UTC
Last enriched: 09/24/2026, 16:03:14 UTC
Last updated: 09/25/2026, 01:56:00 UTC
Views: 6
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.