OSV-2023-1358

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2023-1358

Published

2023-12-26T00:04:18.300258Z

Modified

2023-12-26T00:04:18.300779Z

Summary

Heap-buffer-overflow in js_free_function_def

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65317

Crash type: Heap-buffer-overflow READ 4
Crash state:
js_free_function_def
js_parse_function_decl2
js_parse_postfix_expr

References

Affected packages

Type: GIT
Repo: https://github.com/bellard/quickjs
Events: Introduced

e68993b6788960de05167be624751d951745be78

Fixed

7414e5f67f9a404f3cf91ffa69d0c93bf46d099e

{
    "severity": "MEDIUM"
}