OSV-2025-846

    Dashboard / Vulnerabilities / OSV-2025-846

    OSV-2025-846

    Published: 20 Oct 2025Last Modified: 20 Oct 2025

    Summary: Use-of-uninitialized-value in js_create_function

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=453198741 ``` Crash type: Use-of-uninitialized-value Crash state: js_create_function __JS_EvalInternal JS_EvalObject ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=453198741

    Affected packages

    Package

    Name: quickjs

    Purl: pkg:generic/quickjs

    Affected ranges

    Type: GIT

    Events:

    Introduced- 42eb2795f0daec0adddb0392823a27a64b676169
    Fixed -080c01f34696351d21f34f99081e93adb41ae74a

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2025-846 | CVE-DB