Threats affecting pkg:github/mquickjs

CVE-2025-71470 is an out-of-bounds read vulnerability in MicroQuickJS (mquickjs) before commit 99eed3f. The flaw occurs because JS_Call() raises exceptions during frame setup without updating critical context pointers, allowing attackers to cause the engine to crash via crafted JavaScript that calls a non-function value. This results in a denial of service condition.