CVE-2025-12745: falha de média gravidade em QuickJS
QuickJS quickjs.c js_array_buffer_slice buffer over-read
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.8epss 0.2%
A weakness has been identified in QuickJS up to eb2c89087def1829ed99630cb14b549d7a98408c. This affects the function js_array_buffer_slice of the file quickjs.c. This manipulation causes buffer over-read. The attack is restricted to local execution. The exploit has been made available to the public and could be exploited. This product adopts a rolling release strategy to maintain continuous delivery Patch name: c6fe5a98fd3ef3b7064e6e0145dfebfe12449fea. To fix this issue, it is recommended to deploy a patch.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
n/a · QuickJSReferências
https://github.com/bellard/quickjs/commit/c6fe5a98fd3ef3b7064e6e0145dfebfe12449feahttps://github.com/bellard/quickjs/issues/451https://github.com/bellard/quickjs/issues/451#issue-3533698042https://github.com/bellard/quickjs/issues/451#issuecomment-3481807558https://vuldb.com/?ctiid.331268https://vuldb.com/?id.331268https://vuldb.com/?submit.678850