CVE-2026-0821: quickjs-ng quickjs quickjs.c js_typed_array_constructor heap-based overflow
A vulnerability was determined in quickjs-ng quickjs up to 0.11.0. This vulnerability affects the function jstypedarrayconstructor of the file quickjs.c. Executing a manipulation can lead to heap-based buffer overflow. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. This patch is called c5d80831e51e48a83eab16ea867be87f091783c5. A patch should be applied to remediate this issue.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0821?
CVE-2026-0821 has a high severity due to its potential for remote exploitation through a heap-based buffer overflow.
How do I fix CVE-2026-0821?
To mitigate CVE-2026-0821, update quickjs-ng to version 0.11.1 or later.
What software is affected by CVE-2026-0821?
CVE-2026-0821 affects quickjs-ng versions up to and including 0.11.0.
Can CVE-2026-0821 be exploited remotely?
Yes, CVE-2026-0821 can be exploited remotely due to its nature of affecting the js_typed_array_constructor function.
What kind of vulnerability is CVE-2026-0821?
CVE-2026-0821 is categorized as a heap-based buffer overflow vulnerability.