CVE-2026-120439 — Vulnerability intelligence
—
Published:
- CVSS
- 8.3
- CISA KEV
- Not listed; not proof of no exploitation
Original source text (not a translation)
QuickJS-NG before 0.16.0 contains an integer overflow in js_typed_array_sort() in quickjs.c that allows attackers to cause a heap buffer overflow on 32-bit hosts. Attackers who can run JavaScript can call TypedArray.prototype.sort with a comparator on a typed array near 2^30 elements, wrapping the allocation size and writing indices past the buffer to crash or potentially execute code.