{"id":"CVE-2025-69654","details":"A crafted JavaScript input executed with the QuickJS release 2025-09-13, fixed in commit fcd33c1afa7b3028531f53cd1190a3877454f6b3 (2025-12-11),`qjs` interpreter using the `-m` option and a low memory limit can cause an out-of-memory condition followed by an assertion failure in JS_FreeRuntime (list_empty(&rt-\u003egc_obj_list)) during runtime cleanup. Although the engine reports an OOM error, it subsequently aborts with SIGABRT because the GC object list is not fully released. This results in a denial of service.","modified":"2026-10-21T09:27:22.775796554Z","published":"2026-03-06T00:00:00Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/69xxx/CVE-2025-69654.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/69xxx/CVE-2025-69654.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69654"},{"type":"REPORT","url":"https://github.com/bellard/quickjs/issues/468"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/bellard/quickjs","events":[{"introduced":"0"},{"fixed":"fcd33c1afa7b3028531f53cd1190a3877454f6b3"}],"database_specific":{"extracted_events":[{"source":"DESCRIPTION","range":[{"introduced":"0"},{"fixed":"fcd33c1afa7b3028531f53cd1190a3877454f6b3"}]},{"source":"DESCRIPTION","range":[{"introduced":"0"},{"last_affected":"fcd33c1afa7b3028531f53cd1190a3877454f6b3"}]}]}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-69654.json","vanir_signatures":[{"source":"https://github.com/bellard/quickjs/commit/fcd33c1afa7b3028531f53cd1190a3877454f6b3","target":{"file":"quickjs.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["321922556634478940060679865807493816665","167030822713665587538306754781688095647","170685787878288000855675330717284977004","20917632522658825228703961230595522255","147128111129021416720751134066803559246"]},"id":"CVE-2025-69654-86747aec","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"length":326,"function_hash":"93953887476842481004175685851852162022"},"id":"CVE-2025-69654-bad6a845","signature_type":"Function","signature_version":"v1","source":"https://github.com/bellard/quickjs/commit/fcd33c1afa7b3028531f53cd1190a3877454f6b3","target":{"file":"quickjs.c","function":"cpool_add"}}],"vanir_signatures_modified":"2026-10-21T09:27:22Z"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}