{"id":"OSV-2023-1372","summary":"Heap-use-after-free in JS_NewObjectFromShape","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65393\n\n```\nCrash type: Heap-use-after-free WRITE 8\nCrash state:\nJS_NewObjectFromShape\njs_parse_template\njs_parse_postfix_expr\n```\n","modified":"2023-12-30T00:04:10.276482Z","published":"2023-12-30T00:04:10.276049Z","references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65393"}],"affected":[{"package":{"name":"quickjs","ecosystem":"OSS-Fuzz","purl":"pkg:generic/quickjs"},"ranges":[{"type":"GIT","repo":"https://github.com/bellard/quickjs","events":[{"introduced":"7414e5f67f9a404f3cf91ffa69d0c93bf46d099e"},{"fixed":"3c2cfabfc74e8af1f21db93884ed1ad9b6388a8c"}]}],"ecosystem_specific":{"severity":"HIGH"},"database_specific":{"fixed_range":"3ab1c2b3148d1c70181607002aac23ecdd2ad482:3c2cfabfc74e8af1f21db93884ed1ad9b6388a8c","source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/quickjs/OSV-2023-1372.yaml"}}],"schema_version":"1.7.3"}