Threats tagged 'ghsa-3r39-xffq-r9cc'

CVE-2025-62491 is a Use-After-Free vulnerability in the QuickJS engine's standard library related to iterating over the global list of unhandled rejected promises. The flaw occurs when a custom property getter on an Error object executes JavaScript code that removes and frees the current promise entry during iteration, leading to use of freed memory.