QuickJS before c4cdd61 has a build_for_in_iterator NULL pointer dereference because of an erroneous lexical scope of this with eval.
Weakness
The product dereferences a pointer that it expects to be valid but is NULL.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Quickjs | Quickjs_project | * | 2023-12-09 (excluding) |
| Quickjs | Ubuntu | esm-apps/noble | * |
| Quickjs | Ubuntu | mantic | * |
| Quickjs | Ubuntu | noble | * |
| Quickjs | Ubuntu | upstream | * |