CVE-2026-1145

A flaw has been found in quickjs-ng quickjs up to 0.11.0. Affected by this vulnerability is the function js_typed_array_constructor_ta of the file quickjs.c. This manipulation causes heap-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may be used. Patch name: 53aebe66170d545bb6265906fe4324e4477de8b4. It is suggested to install a patch to address this issue.

• CWE-119
• CWE-122

• https://github.com/paralin/quickjs/commit/53aebe66170d545bb6265906fe4324e4477de8b4Patch
• https://github.com/quickjs-ng/quickjs/
• https://github.com/quickjs-ng/quickjs/issues/1305Exploit, Issue Tracking
• https://github.com/quickjs-ng/quickjs/issues/1305#issue-3785444372Exploit, Issue Tracking
• https://github.com/quickjs-ng/quickjs/pull/1306Issue Tracking, Patch
• https://vuldb.com/?ctiid.341738Permissions Required, VDB Entry
• https://vuldb.com/?id.341738Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.735539Third Party Advisory, VDB Entry

Published

Jan 19, 2026

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-11442Allegra exportReport Directory Traversal Information Disclos…6.5
• CVE-2026-11443Allegra downloadAttachment Cross-Site Scripting Authenticati…4.6
• CVE-2026-11446The Booktics – Booking Calendar for Appointments and Service…5.3
• CVE-2026-11447A security flaw has been discovered in GL.iNet GL-MT3000 up …6.3
• CVE-2026-11448A weakness has been identified in GL.iNet GL-MT3000 up to 4.…5.1
• CVE-2026-11449A security vulnerability has been detected in GL.iNet GL-MT3…6.3
• CVE-2026-11450A vulnerability was detected in GL.iNet GL-MT3000 4.4.5. Thi…7.3
• CVE-2026-11451A flaw has been found in GL.iNet GL-MT3000 4.4.5. This impac…7.3
• CVE-2026-11452A vulnerability has been found in GL.iNet GL-MT3000 up to 4.…7.3
• CVE-2026-11453A vulnerability was found in Tiobon Employee Self-Service Sy…6.3
• CVE-2026-11454The Groundhogg — CRM, Newsletters, and Marketing Automation …6.5
• CVE-2026-11455A vulnerability was determined in FoundationAgents MetaGPT u…5