MuJS e892c9fdb contains an incorrect numeric conversion vulnerability in jsR_isindex() in jsrun.c. A specially crafted JavaScript input containing an excessively large numeric array index can cause an out-of-range floating-point value to be converted to an integer without proper range validation. This results in undefined behavior and can cause process termination, leading to denial of service.
References
Configurations
No configuration.
History
25 Sep 2026, 17:17
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://bugs.ghostscript.com/show_bug.cgi?id=709636 - | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| CWE | CWE-681 |
24 Sep 2026, 16:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-09-24 16:17
Updated : 2026-09-25 17:17
NVD link : CVE-2026-88362
Mitre link : CVE-2026-88362
CVE.ORG link : CVE-2026-88362
JSON object : View
Products Affected
No product.
CWE
CWE-681
Incorrect Conversion between Numeric Types