CVE-2026-1144: quickjs-ng quickjs Atomics Ops quickjs.c use after free
A vulnerability was detected in quickjs-ng quickjs up to 0.11.0. Affected is an unknown function of the file quickjs.c of the component Atomics Ops Handler. The manipulation results in use after free. The attack can be executed remotely. The exploit is now public and may be used. The patch is identified as ea3e9d77454e8fc9cb3ef3c504e9c16af5a80141. Applying a patch is advised to resolve this issue.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2026-1144?
CVE-2026-1144 has a high severity rating due to its potential for remote exploitation through use after free vulnerabilities.
How do I fix CVE-2026-1144?
To fix CVE-2026-1144, upgrade your quickjs-ng quickjs software to a version greater than 0.11.0.
Which versions of quickjs-ng are affected by CVE-2026-1144?
CVE-2026-1144 affects quickjs-ng quickjs versions up to and including 0.11.0.
What type of vulnerability is CVE-2026-1144?
CVE-2026-1144 is categorized as a use after free vulnerability in the Atomics Ops Handler.
Can CVE-2026-1144 be exploited remotely?
Yes, CVE-2026-1144 can be exploited remotely, allowing attackers to manipulate affected systems.