QuickJS Stack-Based Buffer Overflow Vulnerability in Versions Prior to 0.8.0

A stack-based buffer overflow vulnerability has been identified in QuickJS versions prior to 0.8.0. The issue arises in the function JS_GetRuntime within the file quickjs.c, part of the qjs component. This vulnerability can be exploited remotely, leading to a stack overflow error, particularly when the AddressSanitizer is active.

Impact

Exploitation of this vulnerability causes a stack-based buffer overflow, which can disrupt the normal execution of the program and potentially be exploited to execute arbitrary code.

Reproduction

The vulnerability can be reproduced by compiling QuickJS with the AddressSanitizer enabled, using GCC 7.5.0 on Ubuntu 18.04. After compiling the interpreter, the vulnerability can be triggered by executing a JavaScript file that contains a function calling itself recursively. This recursive function call will cause a stack overflow, which can be observed as an error reported by the AddressSanitizer.

Remediation

Users are advised to upgrade to QuickJS version 0.9.0, which addresses this vulnerability.