Threats tagged 'ghsa-rw7h-fw9j-wrgx'

A buffer over-read vulnerability exists in QuickJS up to commit eb2c89087def1829ed99630cb14b549d7a98408c, specifically in the js_array_buffer_slice function. The issue allows local attackers with limited privileges to cause information disclosure and potential denial of service. A patch identified by commit c6fe5a98fd3ef3b7064e6e0145dfebfe12449fea is recommended to fix this vulnerability. Exploit code is publicly available, but no confirmed exploitation in the wild has been reported.