CVE-2026-88362 | BDVDB-2026-378666 Detail

Description#

MuJS e892c9fdb contains an incorrect numeric conversion vulnerability in jsR_isindex() in jsrun.c. A specially crafted JavaScript input containing an excessively large numeric array index can cause an out-of-range floating-point value to be converted to an integer without proper range validation. This results in undefined behavior and can cause process termination, leading to denial of service.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-09-24Record published in the CVE List.
2. Version 22026-09-25Most recent update recorded in the CVE List.