OSV-2025-879

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/quickjs/OSV-2025-879.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2025-879
Published
2025-11-06T00:00:41.075031Z
Modified
2025-11-06T00:00:41.075637Z
Summary
Use-of-uninitialized-value in JS_DefineProperty
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=457858149

Crash type: Use-of-uninitialized-value
Crash state:
JS_DefineProperty
build_backtrace
JS_CallInternal
References

Affected packages

OSS-Fuzz / quickjs

Package

Name
quickjs
Purl
pkg:generic/quickjs

Affected ranges

Type
GIT
Repo
https://github.com/bellard/quickjs
Events
Introduced
42eb2795f0daec0adddb0392823a27a64b676169
Fixed
080c01f34696351d21f34f99081e93adb41ae74a

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific

fixed_range 
"eb2c89087def1829ed99630cb14b549d7a98408c:080c01f34696351d21f34f99081e93adb41ae74a"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/quickjs/OSV-2025-879.yaml"
introduced_range 
"7a488f3e0c1c03699c069bc04f5ce5f1c7f3414a:eb9fa2b8dac0c7a431ef5255fb55943da78d2f3a"