Denial of Service

Every one of the 3 is a mark on the map. Named now: 1 to 3, most at risk first.

1. A crafted JavaScript input executed with the QuickJS release 2025-09-13, fixed in commit fcd33c1afa7b3028531f53cd1190a3877454f6b3 (2025-12-11),`qjs` interpreter using the `-m` opt…CVE-2025-69654Quickjs Project · CVSS 7.5 · 0.3% likely

   CWE-400

2. quickjs-ng through 0.9.0 has a missing length check in JS_ReadString for a string, leading to a heap-based buffer overflow. QuickJS before 2025-04-26 is also affected.CVE-2025-46687QuickJS Project · CVSS 5.6 · 0.3% likely

   CWE-770

3. A crafted JavaScript input can trigger an internal assertion failure in QuickJS release 2025-09-13, fixed in commit 1dbba8a88eaa40d15a8a9b70bb1a0b8fb5b552e6 (2025-12-11), in file…CVE-2025-69653Quickjs Project · CVSS 6.5 · 0.3% likely

   CWE-617

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.