ByteOS Network

NVD Vulnerability Details :

CVE-2025-47154

Awaiting Analysis

Source-cve@mitre.org

Published At-01 May, 2025 | 08:15

Updated At-02 May, 2025 | 13:53

LibJS in Ladybird before f5a6704 mishandles the freeing of the vector that arguments_list references, leading to a use-after-free, and allowing remote attackers to execute arbitrary code via a crafted .js file. NOTE: the GitHub README says "Ladybird is in a pre-alpha state, and only suitable for use by developers."

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	9.0	CRITICAL	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE ID	Type	Source
CWE-820	Secondary	cve@mitre.org

References

Hyperlink	Source	Resource
https://github.com/LadybirdBrowser/ladybird/commit/f5a670421954fc7130c3685b713c621b29516669	cve@mitre.org	N/A
https://jessie.cafe/posts/pwning-ladybirds-libjs/	cve@mitre.org	N/A
https://news.ycombinator.com/item?id=43852096	cve@mitre.org	N/A
https://jessie.cafe/posts/pwning-ladybirds-libjs/	134c704f-9b21-4f2e-91b3-4a467353bcc0	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History