OSV-2025-1018

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/quickjs/OSV-2025-1018.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2025-1018
Published
2025-12-25T00:02:56.807884Z
Modified
2026-08-13T14:14:16.920708Z
Summary
Stack-buffer-overflow in lre_exec
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=471304472

Crash type: Stack-buffer-overflow READ 8
Crash state:
lre_exec
fuzz_regexp.c
References

Affected packages

OSS-Fuzz / quickjs

Package

Name
quickjs
Purl
pkg:generic/quickjs

Affected ranges

Type
GIT
Repo
https://github.com/bellard/quickjs
Events
Introduced
31ef02b90785fbc6effb82c300bf05a2a0903088

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific

introduced_range 
"c73a435f365e5250dd529cde00675528d7609edf:f1139494d18a2053630c5ed3384a42bb70db3c53"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/quickjs/OSV-2025-1018.yaml"