CVE-2025-46688

Description

References

• bellard.org/quickjs/Changelog · Product
• bellard/quickjs commit 1eb05e4 · Patch
• bellard/quickjs · Exploit
• quickjs-ng/quickjs commit 28fa43d · Patch
• quickjs-ng/quickjs · Third Party Advisory
• quickjs-ng/quickjs#1020 · Patch

More vulnerabilities in quickjs

• CVE-2026-1145HIGH 8.8A flaw has been found in quickjs-ng quickjs up to 0.11.0. Affected by this vulnerability is the function js_typed_array_constructor_ta of th…
• CVE-2026-1144HIGH 8.8A vulnerability was detected in quickjs-ng quickjs up to 0.11.0. Affected is an unknown function of the file quickjs.c of the component Atom…
• CVE-2026-0822HIGH 8.8A vulnerability was identified in quickjs-ng quickjs up to 0.11.0. This issue affects the function js_typed_array_sort of the file quickjs.c…
• CVE-2026-0821CRITICAL 9.8A vulnerability was determined in quickjs-ng quickjs up to 0.11.0. This vulnerability affects the function js_typed_array_constructor of the…
• CVE-2025-46687HIGH 7.8quickjs-ng through 0.9.0 has a missing length check in JS_ReadString for a string, leading to a heap-based buffer overflow. QuickJS before 2…