Skip to main content
VulnerabilityPublished

Quickjs: Heap-use-after-free

Affects quickjsSource GCVE Database

0
Severity
Unrated

Rated by Threat Radar

Patch
Available – fixed in e182e3df5c51017a7faa97a654b3f2b9c6330448

Data as of 27 Oct 2026, 00:07 UTC

What to do

Upgrade quickjs to e182e3df5c51017a7faa97a654b3f2b9c6330448.

Affected software

ProductAffectedFixed in
OSS-Fuzzquickjspkg:generic/quickjsOther threatsAffected
  • >=1e19893c82fe150db60f2464e4eeab2b663499d4 <e182e3df5c51017a7faa97a654b3f2b9c6330448
Fixed in
  • e182e3df5c51017a7faa97a654b3f2b9c6330448

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=510792185 ``` Crash type: Heap-use-after-free WRITE 4 Crash state: js_atomics_op js_call_c_function JS_CallInternal ```

References

Community reviews

Loading reviews…