CVE-2025-62490

CVE-2025-62490 is a high-severity use-after-free vulnerability affecting quickjs_project quickjs. The flaw occurs in the js_print_object function when printing arrays, maps, or sets, where attacker-controlled callbacks can resize or modify data structures during the printing process, leading to out-of-bounds access. With a CVSS score of 8.8, this vulnerability is remotely exploitable with low attack complexity, potentially resulting in high impact to confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.