CVE-2024-33263: Medium severity QuickJS QuickJS vulnerability
Last updated 15 April 2025
Other sources
QuickJS commit 3b45d15 was discovered to contain an Assertion Failure via JSFreeRuntime(JSRuntime ) at quickjs.c.
— NVD
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/quickjsto a version that resolves this vulnerability.Fixed in 2024.01.13-5 - Upgrade
Upgrade
debian/quickjsto a version that resolves this vulnerability.Fixed in 2025.04.26-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-33263?
CVE-2024-33263 has been classified as a moderate severity vulnerability due to the assertion failure which can lead to application instability.
How do I fix CVE-2024-33263?
To fix CVE-2024-33263, you should upgrade to the version 2024.01.13-5 of the QuickJS package.
Which software is affected by CVE-2024-33263?
CVE-2024-33263 affects QuickJS software instances, specifically noted in the Debian quickjs package.
What is the impact of CVE-2024-33263?
The impact of CVE-2024-33263 includes potential application crashes and instability due to an assertion failure.
Who reported CVE-2024-33263?
CVE-2024-33263 was discovered in a QuickJS commit and reported through their issue tracking system.