← Database

CVE-2025-46688

MEDIUM CVSS: 5.6 Published: 2025-04-27 Modified: 2026-06-17

Description

quickjs-ng through 0.9.0 has an incorrect size calculation in JS_ReadBigInt for a BigInt, leading to a heap-based buffer overflow. QuickJS before 2025-04-26 is also affected.

Affected Platforms

Quickjs Project QuickjsQuickjs-Ng Quickjs

Weakness Type

CWE-131, CWE-131

References