Debian/quickjs-ng: high 7
QuickJS-NG before 0.16.0 contains an integer overflow in js_typed_array_sort() in quickjs.c that allows attackers to cause a heap buffer overflow on 32-bit hosts. Attackers who can run JavaScript can
Action: Upgrade quickjs-ng to 0.16.2-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.16.2-1 | - |
Fixed versions
| 0.16.2-1 |
Sources
published · modified · JSON