CVE Feed

    Dashboard / CVE / CVE-2025-47154

    CVE-2025-47154

    LibJS in Ladybird before f5a6704 mishandles the freeing of the vector that arguments_list references, leading to a use-after-free, and allowing remote attackers to execute arbitrary code via a crafted .js file. NOTE: the GitHub README says "Ladybird is in a pre-alpha state, and only suitable for use by developers."

    Published:May 1, 2025
    Last Modified:Apr 15, 2026
    EPS:May 1, 2025
    EPSS Score:0.01148
    CVSS Score:9

    Affected Products

    No affected product recorded yet

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-820 Missing Synchronization

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High