← All advisories

High severity7.5NVD Advisory· Published Apr 23, 2024· Updated Jun 17, 2026

CVE-2023-48183

CVE-2023-48183

Description

QuickJS before c4cdd61 has a build_for_in_iterator NULL pointer dereference because of an erroneous lexical scope of "this" with eval.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Quickjs Project/Quickjs
cpe:2.3:a:quickjs_project:quickjs:*:*:*:*:*:*:*:*
Range: <2023-12-09
QuickJS/QuickJSdescription
Quickjs Ng/Quickjsllm-fuzzy
Range: <c4cdd61

Patches

Vulnerability mechanics

References

2

github.com/bellard/quickjs/commit/c4cdd61a3ed284cd760faf6b00bbf0cb908da077nvdPatch
github.com/bellard/quickjs/issues/192nvdExploitIssue Tracking

News mentions

0

No linked articles in our index yet.