Skip to content
Threat Feed
Subscribe

Product

QuickJS-NG (< 0.16.0)

1 brief RSS
high advisory

QuickJS-NG: Heap buffer overflow in js_proxy_get_own_property_names (CVE-2026-120438)

QuickJS-NG before 0.16.0 contains an integer overflow in the js_proxy_get_own_property_names function that can lead to heap buffer overflows and potential code execution on 32-bit hosts via malicious Proxy ownKeys traps.

QuickJS-NG vulnerability memory-corruption remote-code-execution
1t 2c