OSV-2026-703

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/quickjs/OSV-2026-703.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2026-703
Published
2026-05-09T00:17:31.678264Z
Modified
2026-05-09T00:17:31.678556Z
Summary
Heap-use-after-free in js_atomics_op
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=510792185

Crash type: Heap-use-after-free WRITE 4
Crash state:
js_atomics_op
js_call_c_function
JS_CallInternal
References

Affected packages

OSS-Fuzz / quickjs

Package

Name
quickjs
Purl
pkg:generic/quickjs

Affected ranges

Type
GIT
Repo
https://github.com/bellard/quickjs
Events
Introduced
1e19893c82fe150db60f2464e4eeab2b663499d4
Fixed
e182e3df5c51017a7faa97a654b3f2b9c6330448

Ecosystem specific 

{
    "severity": "HIGH"
}

Database specific

fixed_range 
"d7ae12ae71dfd6ab2997527d295014a8996fa0f9:e182e3df5c51017a7faa97a654b3f2b9c6330448"
introduced_range 
"2d99c323a27ca9013230cfd6fb56ab37f2a0f1d4:8807fedec55bc4dbdf7b4780d36bfc4b4fd6e5e2"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/quickjs/OSV-2026-703.yaml"