CVE-2026-0822 | quickjs-ng quickjs up to 0.11.0 quickjs.c js_typed_array_sort heap-based overflow (Issue 1297)

A vulnerability, which was classified as critical, has been found in quickjs-ng quickjs up to 0.11.0. This issue affects the function js_typed_array_sort of the file quickjs.c. The manipulation leads to heap-based buffer overflow.

This vulnerability is referenced as CVE-2026-0822. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

To fix this issue, it is recommended to deploy a patch.