CVE-2026-0821 | quickjs-ng quickjs up to 0.11.0 quickjs.c js_typed_array_constructor heap-based overflow (Issue 1296)

January 9, 2026 Yanac

A vulnerability classified as critical was found in quickjs-ng quickjs up to 0.11.0. This vulnerability affects the function js_typed_array_constructor of the file quickjs.c. Executing a manipulation can lead to heap-based buffer overflow.

The identification of this vulnerability is CVE-2026-0821. The attack may be launched remotely. Furthermore, there is an exploit available.

A patch should be applied to remediate this issue.VulDB Recent EntriesRead More