Stack Overflow Vulnerability in QuickJS by Fabrice Bellard
CVE-2023-31922

7.5HIGH

Key Information:

Vendor

Quickjs Project

Status
Quickjs
Vendor
CVE Published:
12 May 2023

What is CVE-2023-31922?

A stack overflow vulnerability has been identified in QuickJS related to the js_proxy_isArray component within the quickjs.c file. This issue, introduced in commit 2788d71, may allow an attacker to exploit the handling of certain inputs, potentially leading to denial-of-service conditions or unexpected behavior in applications relying on this JavaScript engine. Developers using affected versions of QuickJS should prioritize updating their implementations to safeguard against potential exploits.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/bellard/quickjs/issues/178

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.