CVE-2025-12745: QuickJS quickjs.c js_array_buffer_slice buffer over-read
A weakness has been identified in QuickJS up to eb2c89087def1829ed99630cb14b549d7a98408c. This affects the function jsarraybufferslice of the file quickjs.c. This manipulation causes buffer over-read. The attack is restricted to local execution. The exploit has been made available to the public and could be exploited. This product adopts a rolling release strategy to maintain continuous delivery Patch name: c6fe5a98fd3ef3b7064e6e0145dfebfe12449fea. To fix this issue, it is recommended to deploy a patch.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12745?
CVE-2025-12745 has been assessed as a moderate severity vulnerability.
How do I fix CVE-2025-12745?
To remediate CVE-2025-12745, ensure you update QuickJS to a version beyond eb2c89087def1829ed99630cb14b549d7a98408c.
What kind of attack is possible with CVE-2025-12745?
CVE-2025-12745 allows for local execution attacks due to buffer over-read vulnerabilities.
Which versions of QuickJS are affected by CVE-2025-12745?
CVE-2025-12745 affects all versions of QuickJS up to and including eb2c89087def1829ed99630cb14b549d7a98408c.
What component of QuickJS is vulnerable in CVE-2025-12745?
The vulnerability in CVE-2025-12745 specifically affects the js_array_buffer_slice function in quickjs.c.