CVE-2026-88362CWE-681

CVE-2026-88362

High · published September 24, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
26.6
In the wild
Unconfirmed
What it is

MuJS e892c9fdb contains an incorrect numeric conversion vulnerability in jsR_isindex() in jsrun.c. A specially crafted JavaScript input containing an excessively large numeric array index can cause an out-of-range floating-point value to be converted to an integer without proper range validation. This results in undefined behavior and can cause process termination, leading to denial of service.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00343 · 26.6th percentile
Weakness
CWE-681 · Incorrect Conversion between Numeric Types
Published
2026-09-24T20:17Z
References (3)
https://bugs.ghostscript.com/show_bug.cgi?id=709636 · [email protected]https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mujs.git/commit/?id=8a32c397b28fe45747ac4e9e4f3dca049825eda7 · [email protected]https://bugs.ghostscript.com/show_bug.cgi?id=709636 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 26 SEP 03:27Z
    EPSS moved — → 0%
    epss
  • 24 SEP 00:00Z
    MuJS e892c9fdb contains an incorrect numeric conversion vulnerability in jsR_isindex() in jsrun.c
    cvelistv5