CVE ID : CVE-2025-62496<\/p>\n
Published : Oct. 16, 2025, 4:15 p.m. | 25\u00a0minutes ago<\/p>\n
Description : A vulnerability exists in the QuickJS engine’s BigInt string parsing logic (js_bigint_from_string) when attempting to create a BigInt from a string with an excessively large number of digits.<\/p>\n
The function calculates the necessary number of bits (n_bits) required to store the BigInt using the formula:<\/p>\n
$$text{n_bits} = (text{n_digits} times 27 + 7) \/ 8 quad (text{for radix 10})$$<\/p>\n
* For large input strings (e.g., $79,536,432$ digits or more for base 10), the intermediate calculation $(text{n_digits} times 27 + 7)$ exceeds the maximum value of a standard signed 32-bit integer, resulting in an Integer Overflow.<\/p>\n
* The resulting n_bits value becomes unexpectedly small or even negative due to this wrap-around.<\/p>\n
* This flawed n_bits is then used to compute n_limbs, the number of memory “limbs” needed for the BigInt object. Since n_bits is too small, the calculated n_limbs is also significantly underestimated.<\/p>\n
* The function proceeds to allocate a JSBigInt object using this underestimated n_limbs.<\/p>\n
* When the function later attempts to write the actual BigInt data into the allocated object, the small buffer size is quickly exceeded, leading to a Heap Out-of-Bounds Write as data is written past the end of the allocated r->tab array.<\/p>\n
Severity: 7.1 | HIGH<\/p>\n
Visit the link for more details, such as CVSS details, affected products, timeline, and more…\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"
CVE ID : CVE-2025-62496 Published : Oct. 16, 2025, 4:15 p.m. | 25\u00a0minutes ago Description : A vulnerability exists in the QuickJS engine’s BigInt string parsing logic (js_bigint_from_string) when attempting to create a BigInt from a string with an excessively large number of digits. The function calculates the necessary number of bits (n_bits) required to …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-71824","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/71824","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=71824"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/71824\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=71824"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=71824"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=71824"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}