CVE-2025-12745

Medium

Description

A weakness has been identified in QuickJS up to eb2c89087def1829ed99630cb14b549d7a98408c. This affects the function js_array_buffer_slice of the file quickjs.c. This manipulation causes buffer over-read. The attack is restricted to local execution. The exploit has been made available to the public and could be exploited. This product adopts a rolling release strategy to maintain continuous delivery Patch name: c6fe5a98fd3ef3b7064e6e0145dfebfe12449fea. To fix this issue, it is recommended to deploy a patch.

SeverityMedium

CVSS5.3

Exploit probability—

ProductBellard Quickjs

PublishedNov 5, 2025

First seenNov 5, 2025

Weakness typeCWE-126CWE-126 CWE-119Memory buffer bounds error

How to fix

Update

bellard quickjs2025-11-03 or later

Patches

github.com/bellard/quickjs/commit/c6fe5a98fd3ef3b7064e6e0145dfebfe12449fea

Affected products

Product	Affected versions	Fixed in
bellard quickjs	v < 2025-11-03	2025-11-03

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.