Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

QuickJS — Vulnerabilities & Security Advisories 16

All 16 CVE vulnerabilities found in QuickJS, with AI-generated Chinese analysis, references, and POCs.

This page catalogs Common Weakness Enumerations associated with QuickJS, an embedded JavaScript engine developed by Fabrice Bellard. It aggregates security data to provide a comprehensive view of weaknesses identified within this specific software product, ensuring that developers and security analysts have access to a centralized repository of known issues. The content collected here includes vulnerability reports, patches, and advisory details ranging from the initial release of QuickJS up to the most recent public disclosures. This time frame ensures that historical context is preserved alongside current threat intelligence, allowing for a complete lifecycle analysis of the engine's security posture. Readers can utilize this resource to track vendor advisories from official sources and community reports, gaining insight into how specific weakness classes manifest within QuickJS. Furthermore, users can look up the product’s vulnerability history to understand trends in bug discovery and remediation speeds. By examining the relationship between different weakness types and their impact on the JavaScript execution environment, stakeholders can better assess risk levels and prioritize mitigation strategies. This aggregation serves as a reference point for understanding the cumulative security landscape of QuickJS without requiring manual cross-referencing of multiple disparate sources. The structured presentation facilitates efficient auditing processes and supports informed decision-making regarding dependency management and code review priorities for teams utilizing this engine in production environments.

Vendor: quickjs-ng

CVE ID Title CVSS Severity Published
CVE-2026-3979 quickjs-ng quickjs quickjs.c js_iterator_concat_return use after free CWE-416 5.3 Medium 2026-03-12
CVE-2026-1145 quickjs-ng quickjs quickjs.c js_typed_array_constructor_ta heap-based overflow CWE-122 6.3 Medium 2026-01-19
CVE-2026-1144 quickjs-ng quickjs Atomics Ops quickjs.c use after free CWE-416 6.3 Medium 2026-01-19
CVE-2026-0822 quickjs-ng quickjs quickjs.c js_typed_array_sort heap-based overflow CWE-122 6.3 Medium 2026-01-10
CVE-2026-0821 quickjs-ng quickjs quickjs.c js_typed_array_constructor heap-based overflow CWE-122 7.3 High 2026-01-10
CVE-2025-12745 QuickJS quickjs.c js_array_buffer_slice buffer over-read CWE-126 5.3 Medium 2025-11-05
CVE-2025-62496 Integer overflow in js_bigint_from_string in QuickJS CWE-190 7.5AI High AI 2025-10-16
CVE-2025-62495 Type confusion in string addition in QuickJS CWE-191 9.8AI Critical AI 2025-10-16
CVE-2025-62494 Type confusion in string addition in QuickJS CWE-704 9.8AI Critical AI 2025-10-16
CVE-2025-62493 Heap out-of-bounds read in js_bigint_to_string1 in QuickJS CWE-125 - - AI 2025-10-16
CVE-2025-62492 Heap out-of-bounds read in js_typed_array_indexOf in QuickJS CWE-125 5.9AI Medium AI 2025-10-16
CVE-2025-62491 Use-after-free in js_std_promise_rejection_check in QuickJS CWE-416 9.1AI Critical AI 2025-10-16
CVE-2025-62490 Use-after-free in js_print_object in QuickJS CWE-416 9.8AI Critical AI 2025-10-16
CVE-2025-46687 QuickJS 安全漏洞 CWE-770 5.6 Medium 2025-04-27
CVE-2025-46688 QuickJS 安全漏洞 CWE-131 5.6 Medium 2025-04-27
CVE-2024-13903 quickjs-ng QuickJS qjs quickjs.c JS_GetRuntime stack-based overflow CWE-121 4.3 Medium 2025-03-21

All 16 known CVE vulnerabilities affecting QuickJS with full Chinese analysis, references, and POCs where available.