QQuickJS Project

Products

Exploited and recent CVEs

• CVE-2025-46688 Medium 5.6 quickjs-ng through 0.9.0 has an incorrect size calculation in JS_ReadBigInt for a BigInt, leading to a heap-based buffer overflow. QuickJS before 2025-04-26 is also affected. 0.3%
• CVE-2025-46687 Medium 5.6 quickjs-ng through 0.9.0 has a missing length check in JS_ReadString for a string, leading to a heap-based buffer overflow. QuickJS before 2025-04-26 is also affected. 0.3%