CVE-2023-48183: Null Pointer Dereference
Published Apr 23, 2024
·Updated
Last updated 15 April 2025
Other sources
QuickJS before c4cdd61 has a buildforiniterator NULL pointer dereference because of an erroneous lexical scope of "this" with eval.
— NVD
Affected Software
3 affected componentsFixes available
debian/quickjs
2024.01.13-5
QuickJS QuickJS<c4cdd61
Quickjs Project Quickjs<2023-12-09
Remediation
Event History
Apr 23, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·07:15 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:15 AM
RemedyAffected Software
Apr 15, 2025
Data Sourced
via Ubuntu·09:59 PM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Launchpad·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-48183?
CVE-2023-48183 has a critical severity due to a NULL pointer dereference that could lead to application crashes.
2
How do I fix CVE-2023-48183?
To fix CVE-2023-48183, upgrade to QuickJS version 2024.01.13-5 or later.
3
What causes CVE-2023-48183?
CVE-2023-48183 is caused by an erroneous lexical scope of 'this' with eval, leading to a potential NULL pointer dereference.
4
Which versions of QuickJS are affected by CVE-2023-48183?
CVE-2023-48183 affects QuickJS versions up to but not including c4cdd61.
5
Is CVE-2023-48183 still exploitable in the latest version of QuickJS?
No, CVE-2023-48183 is not exploitable in QuickJS version 2024.01.13-5 and later, as the vulnerability has been addressed.