Skip to main content
VulnerabilityPublished

Quickjs: Use-of-uninitialized-value

Affects quickjsSource GCVE Database

0
Severity
Medium

Rated Medium by Threat Radar's AI analysis

Patch
Available – fixed in 080c01f34696351d21f34f99081e93adb41ae74a

Data as of 4 Nov 2026, 18:25 UTC

What to do

Upgrade quickjs to 080c01f34696351d21f34f99081e93adb41ae74a.

Affected software

ProductAffectedFixed in
OSS-Fuzzquickjspkg:generic/quickjsOther threatsAffected
  • >=42eb2795f0daec0adddb0392823a27a64b676169 <080c01f34696351d21f34f99081e93adb41ae74a
Fixed in
  • 080c01f34696351d21f34f99081e93adb41ae74a

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

A patch is available and has been applied in commit 080c01f34696351d21f34f99081e93adb41ae74a. Users should update to the fixed version to remediate this vulnerability.

Description

A use-of-uninitialized-value vulnerability was reported in Quickjs affecting the JS_DefineProperty function. The issue was identified by OSS-Fuzz and results in a crash due to uninitialized memory usage. A fix has been committed to address this flaw.

References

Community reviews

Loading reviews…