https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-05T07:00:07.372890+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-120438 fkie_cve-2026-120438 2026-11-05T07:00:07.374399+00:00

QuickJS-NG before 0.16.0 contains an integer overflow in js_proxy_get_own_property_names() in quickjs.c that causes a heap buffer overflow on 32-bit hosts. Attackers running JavaScript can return a large array-like object from a Proxy ownKeys trap to wrap the allocation size, causing crashes or potential code execution.

 https://db.gcve.eu/vuln/ghsa-m9xj-cppc-fm6c GHSA-m9xj-cppc-fm6c 2026-11-05T07:00:07.374485+00:00

QuickJS-NG before 0.16.0 contains an integer overflow in js_proxy_get_own_property_names() in quickjs.c that causes a heap buffer overflow on 32-bit hosts. Attackers running JavaScript can return a large array-like object from a Proxy ownKeys trap to wrap the allocation size, causing crashes or potential code execution.

 https://db.gcve.eu/vuln/ubuntu-cve-2026-120438 UBUNTU-CVE-2026-120438 2026-11-05T07:00:07.374505+00:00

Affected: Ubuntu:26.10: quickjs-ng

QuickJS-NG before 0.16.0 contains an integer overflow in js_proxy_get_own_property_names() in quickjs.c that causes a heap buffer overflow on 32-bit hosts. Attackers running JavaScript can return a large array-like object from a Proxy ownKeys trap to wrap the allocation size, causing crashes or potential code execution.