Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:quickjs-Ng_project:quickjs-Ng:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

QuickJS-NG: Heap buffer overflow in js_proxy_get_own_property_names (CVE-2026-120438)

QuickJS-NG before 0.16.0 contains an integer overflow in the js_proxy_get_own_property_names function that can lead to heap buffer overflows and potential code execution on 32-bit hosts via malicious Proxy ownKeys traps.

QuickJS-NG vulnerability memory-corruption remote-code-execution
1t 2c