Security Advisory

CVE-2025-46687

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-04-27 00:00:00
Last updated 2025-04-28 16:19:35
Assigner mitre
State PUBLISHED

Description

quickjs-ng through 0.9.0 has a missing length check in JS_ReadString for a string, leading to a heap-based buffer overflow. QuickJS before 2025-04-26 is also affected.