CVE-2023-48184

Published: 23 April 2024

QuickJS before 7414e5f has a quickjs.h JS_FreeValueRT use-after-free because of incorrect garbage collection of async functions with closures.

Status

References

• https://www.cve.org/CVERecord?id=CVE-2023-48184
• https://github.com/bellard/quickjs/issues/198
• https://github.com/bellard/quickjs/issues/156
• https://github.com/bellard/quickjs/commit/7414e5f67f9a404f3cf91ffa69d0c93bf46d099e
• NVD
• Launchpad
• Debian