4.0Medium

CVE-2024-33263

ubuntu ubuntu Published: 2024-04-26 03:00 (2 years ago)

Description

QuickJS commit 3b45d15 was discovered to contain an Assertion Failure via JS_FreeRuntime(JSRuntime *) at quickjs.c.

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

Vendor	Product	Versions
ubuntu	ubuntu	10.04

References and patches

https://github.com/bellard/quickjs/issues/277

CVSS score

4.0Medium

Source: CISA-ADP · CVSS 3.1

Attack vector: Local
Attack complexity: Low
Privileges required: None
User interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: None
Availability: Low

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS (chance of exploitation in 30 days)

0.32%

higher than 25% of all CVEs

CISA assessment (SSVC)

Exploitation: none
Automatable: no
Technical impact: partial

Timeline

ID reserved2024-04-23
Published2024-04-26 03:00
Reached IP-DB2026-10-24 23:54
Last updated2024-11-21 23:29

Assigned by (CNA): mitre

View at source: CVE.org · NVD

Get told when these products get a new vulnerability

Turn on email alerts

Free · with an account · switch off any time

Recent CVEs in the same product — Ubuntu

7.7High

CVE-2026-109518 6 days ago

APT RCE via hard link reuse

Debian APT; Ubuntu APT

On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipulate the HTTP traffic (including a malicious mirror or proxy) between an APT client and an archive server triggered by a package install can trick the client into install…

6.5Medium

CVE-2026-121412 8 days ago

FreeRDP 3.0.0 before 3.32.2 Proxy Memory Exhaustion via DVC Reassembly

FreeRDP FreeRDP

FreeRDP from 3.0.0 before 3.32.2 contains an uncontrolled resource consumption vulnerability in the proxy that lets connected clients retain heap memory via intercepted DVC message reassembly. Attackers can declare a large DATA_FIRST length and keep sending f…

4.3Medium

CVE-2026-121410 8 days ago

FreeRDP before 3.32.2 Denial of Service via RDPGFX ALPHA WIRETOSURFACE_2

FreeRDP FreeRDP

FreeRDP before 3.32.2 contains a denial of service vulnerability in the RDPGFX ALPHA WIRETOSURFACE_2 handler that fails to validate zero surface dimensions. A malicious RDP server can send a crafted WIRETOSURFACE_2 PDU with zero width and height, triggering a…

3.1Low

CVE-2026-121411 8 days ago

FreeRDP before 3.32.2 X11 Client Abort via RDPGFX Scaled Output Geometry

FreeRDP FreeRDP

FreeRDP before 3.32.2 fails to bound server-supplied target dimensions and output origin in RDPGFX MAPSURFACETOSCALEDOUTPUT PDUs, allowing malicious RDP servers to abort X11 clients. Attackers can map a surface to oversized scaled output, triggering checked U…

5.9Medium

CVE-2026-121409 8 days ago

FreeRDP before 3.32.2 Denial of Service via Oversized X.224 Routing Token

FreeRDP FreeRDP

FreeRDP before 3.32.2 contains a denial of service vulnerability that allows malicious servers or unauthenticated peers to abort clients or proxies via oversized X.224 routing tokens. Attackers can send an oversized LoadBalanceInfo in a Server Redirection PDU…

6.5Medium

CVE-2026-121407 8 days ago

FreeRDP before 3.32.2 Shadow Server Denial of Service via remdesk Channel

FreeRDP FreeRDP

FreeRDP before 3.32.2 contains a denial of service vulnerability in the shadow server's remdesk_server_thread that allows authenticated clients to crash the process via an inverted PDU length check. Attackers can send an 8192-byte remdesk payload declaring an…