quickjs-ng

Products

ProductCVEsExploitedLatest
QuickJS6–Mar 12, 2026
QuickJS-NG3–Nov 2, 2026

Exploited and recent CVEs

  • CVE-2026-120440 Medium 5.3 QuickJS-NG before 0.16.0 Memory Leak via Atomics.store 0.5%
  • CVE-2026-120439 High 7.0 QuickJS-NG before 0.16.0 Heap Buffer Overflow via TypedArray.prototype.sort 0.3%
  • CVE-2026-120438 High 7.8 QuickJS-NG before 0.16.0 Heap Buffer Overflow via Proxy ownKeys Enumeration 0.1%
  • CVE-2026-3979 Medium 5.3 quickjs-ng quickjs quickjs.c js_iterator_concat_return use after free 0.1%
  • CVE-2026-1145 Medium 6.3 quickjs-ng quickjs quickjs.c js_typed_array_constructor_ta heap-based overflow 0.4%
  • CVE-2026-1144 Medium 6.3 quickjs-ng quickjs Atomics Ops quickjs.c use after free 0.4%
  • CVE-2026-0822 Medium 6.3 quickjs-ng quickjs quickjs.c js_typed_array_sort heap-based overflow 0.5%
  • CVE-2026-0821 High 7.3 quickjs-ng quickjs quickjs.c js_typed_array_constructor heap-based overflow 0.5%
  • CVE-2024-13903 Medium 4.3 quickjs-ng QuickJS qjs quickjs.c JS_GetRuntime stack-based overflow 0.7%