{"id":"CVE-2026-88378","title":"QuickJS commit 04be24600 contains a heap out-of-bounds write condition in JS_ReadFunctionTag().","summary":"QuickJS commit 04be24600 contains a heap out-of-bounds write condition in JS_ReadFunctionTag().","severity":"none","published":"2026-09-24","updated":"2026-09-24","sourceUpdated":"2026-09-24T21:08:22.573","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-88378","references":[{"url":"https://github.com/bellard/quickjs/issues/549","label":"cve@mitre.org"},{"url":"https://github.com/bellard/quickjs/pull/553","label":"cve@mitre.org"},{"url":"https://github.com/bellard/quickjs/pull/553/changes/42526037cfc0b2a94a875c0de0f4bbeaf597a542","label":"cve@mitre.org"}],"tags":["nvd","cve.org"],"ingestedAt":"2026-09-24T16:47:15.853Z","slug":"CVE-2026-88378","body":"## Overview\n\nQuickJS commit 04be24600 contains a heap out-of-bounds write condition in JS_ReadFunctionTag().\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}