GHSA-jh95-x4h9-f49qHighCVSS 7.5

MuJS e892c9fdb contains an incorrect numeric conversion vulnerability in jsR_isindex() in jsrun.c...

Published
September 24, 2026
Last Modified
September 25, 2026

🔗 CVE IDs covered (1)

📋 Description

MuJS e892c9fdb contains an incorrect numeric conversion vulnerability in jsR_isindex() in jsrun.c. A specially crafted JavaScript input containing an excessively large numeric array index can cause an out-of-range floating-point value to be converted to an integer without proper range validation. This results in undefined behavior and can cause process termination, leading to denial of service.

🔗 References (4)