[ Vendor · 3 CVEs ]
quickjs-ng
CVEs affecting quickjs-ng published in the last 30 days, plus any quickjs-ng CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-120440 | 2 Nov 2026 | CVSS 5.3 | QuickJS-NGQuickJS-NG before 0.16.0 contains a memory leak vulnerability in js_atomics_store() in quickjs.c that fails to free the converted value when… | |
| CVE-2026-120438 | 2 Nov 2026 | CVSS 7.8 | QuickJS-NGQuickJS-NG before 0.16.0 contains an integer overflow in js_proxy_get_own_property_names() in quickjs.c that causes a heap buffer overflow on 32-bit… | |
| CVE-2026-120439 | 2 Nov 2026 | CVSS 7.0 | QuickJS-NGQuickJS-NG before 0.16.0 contains an integer overflow in js_typed_array_sort() in quickjs.c that allows attackers to cause a heap buffer overflow on… |