PT-2025-42489 · Quickjs+1 · Quickjs+1

Published 2025-10-16 · Updated 2025-11-21 · CVE-2025-62492

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions QuickJS (affected versions not specified)

Description An issue exists in the QuickJS engine related to floating-point arithmetic precision errors within the TypedArray.prototype.indexOf() function when a negative fromIndex argument is provided. Specifically, when a very small negative value is used for the fromIndex argument ($d), the addition of this value to the array length (len) can result in a loss of precision, leading to an index calculation that results in len. This causes an out-of-bounds read of one element beyond the array buffer, potentially leading to Information Disclosure of adjacent memory contents. The issue arises because the fromIndex argument, read as a double variable, is used to calculate the starting position for the search.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2025-62492

Affected Products

Debian

Quickjs

References · 12

• 🔥 https://issuetracker.google.com/434194797 · Exploit
• https://ubuntu.com/security/CVE-2025-62492 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-62492 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-62492 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-62492 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-62492 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-62492 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-62492 · Vendor Advisory
• https://twitter.com/CVEnew/status/1978926590336585849 · Twitter Post
• https://t.me/CVEtracker/35105 · Telegram Post
• https://bellard.org/quickjs/Changelog · Note
• https://t.me/avleonovcom/1609 · Telegram Post