Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Heap Buffer Overflow in Google Chrome's JavaScript Engine
published 2 years ago
Summary
A vulnerability in Google Chrome's JavaScript engine could cause the browser to crash or potentially allow an attacker to execute malicious code. This issue affects users who run JavaScript-heavy web applications. Update to the latest version of Google Chrome to fix the issue.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| OSS-Fuzz | – | quickjs | All versions |
Original advisory text
Heap-buffer-overflow in emit_goto
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66831
```
Crash type: Heap-buffer-overflow READ 1
Crash state:
emit_goto
emit_class_field_init
js_parse_function_decl2
```
```
Crash type: Heap-buffer-overflow READ 1
Crash state:
emit_goto
emit_class_field_init
js_parse_function_decl2
```
References
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66831 Third Party Advisory
Timeline
Published27 Mar 2024
Updated6 Mar 2026
First seen6 Mar 2026
Track software like this
Free during beta