Threats tagged 'ghsa-xffc-9827-rpvc'

QuickJS-NG versions before 0.16.0 have an integer overflow vulnerability in the js_typed_array_sort() function. This flaw allows attackers who can execute JavaScript to cause a heap buffer overflow on 32-bit systems by invoking TypedArray.prototype.sort with a comparator on very large typed arrays. The overflow can lead to crashes or potentially arbitrary code execution.