bellard records
3 published records for vendor bellard.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 66.7%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
- CWE-617 Reachable Assertion1
- CWE-770 Allocation of Resources Without Limits or Throttling1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
31Monitor | CVE-2025-46687No exploit | quickjs-ng through 0.9.0 has a missing length check in JS_ReadString for a string, leading to a heap-based buffer overflow.quickjs-ng · quickjs · CWE-770 | High7.8 | — | 0.3% | Apr 27, 2025 |
16Monitor | CVE-2024-33263No exploit | QuickJS commit 3b45d15 was discovered to contain an Assertion Failure via JS_FreeRuntime(JSRuntime *) at quickjs.c.bellard · quickjs · CWE-617 | Medium4.0 | — | 0.3% | May 14, 2024 |
7Monitor | CVE-2025-12745No exploit | QuickJS quickjs.c js_array_buffer_slice buffer over-readbellard · quickjs · CWE-119 | Low1.9 | — | 0.2% | Nov 5, 2025 |
- CVE-2025-4668731Monitor
quickjs-ng through 0.9.0 has a missing length check in JS_ReadString for a string, leading to a heap-based buffer overflow.
HighCVSS 7.8No exploitEPSS 0%quickjs-ng · quickjsApr 27, 2025
- CVE-2024-3326316Monitor
QuickJS commit 3b45d15 was discovered to contain an Assertion Failure via JS_FreeRuntime(JSRuntime *) at quickjs.c.
MediumCVSS 4.0No exploitEPSS 0%bellard · quickjsMay 14, 2024
- CVE-2025-127457Monitor
QuickJS quickjs.c js_array_buffer_slice buffer over-read
LowCVSS 1.9No exploitEPSS 0%bellard · quickjsNov 5, 2025