{"id":"OSV-2025-884","summary":"Heap-use-after-free in JS_DefineProperty","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=458199402\n\n```\nCrash type: Heap-use-after-free READ 8\nCrash state:\nJS_DefineProperty\nbuild_backtrace\nJS_CallInternal\n```\n","modified":"2025-11-08T00:17:46.633033Z","published":"2025-11-08T00:17:46.632315Z","references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=458199402"}],"affected":[{"package":{"name":"quickjs","ecosystem":"OSS-Fuzz","purl":"pkg:generic/quickjs"},"ranges":[{"type":"GIT","repo":"https://github.com/bellard/quickjs","events":[{"introduced":"1e19893c82fe150db60f2464e4eeab2b663499d4"},{"fixed":"fcbf5ea2a63510f35f9ab2baadd59781be16a167"}]}],"ecosystem_specific":{"severity":"HIGH"},"database_specific":{"fixed_range":"9688007ccbba2024b339ddcd52044b23e2a4d982:fcbf5ea2a63510f35f9ab2baadd59781be16a167","introduced_range":"2d99c323a27ca9013230cfd6fb56ab37f2a0f1d4:8807fedec55bc4dbdf7b4780d36bfc4b4fd6e5e2","source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/quickjs/OSV-2025-884.yaml"}}],"schema_version":"1.7.3"}