{"id":123965,"date":"2025-05-03T15:05:07","date_gmt":"2025-05-03T13:05:07","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-libjs-pozvolyayushhaya-vypolnit-kod-pri-otkrytii-straniczy-v-brauzere-ladybird"},"modified":"2025-05-03T15:05:07","modified_gmt":"2025-05-03T13:05:07","slug":"uyazvimost-v-libjs-pozvolyayushhaya-vypolnit-kod-pri-otkrytii-straniczy-v-brauzere-ladybird","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/uyazvimost-v-libjs-pozvolyayushhaya-vypolnit-kod-pri-otkrytii-straniczy-v-brauzere-ladybird","title":{"rendered":"A vulnerability in LibJS allows code execution when opening a page in the Ladybird browser.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A vulnerability (CVE-2025-47154) has been identified in the JavaScript engine LibJS, used in the Ladybird web browser, allowing the execution of arbitrary code on the system when processing specially crafted JavaScript code. The vulnerability is caused by the deallocation of memory on the m_argument_values_buffer vector, where a pointer remained in the arguments_list structure, leading to access to already freed memory. A working prototype of the exploit is available. <\/p>\n

The researcher who discovered the issue conducted fuzz testing on LibJS, during which 10 crashes were recorded. An analysis of one of the crashes revealed that the problem could be exploited when processing JavaScript code. The vulnerability allowed reading from and writing to arbitrary areas of the process's memory. Code execution was organized in the exploit by overwriting the return pointer from the rendering function. Using return-oriented programming (ROP), a chain was formed to execute the system call execve to launch an external application.