CVE-2026-88362

Name of the Vulnerable Software and Affected Versions MuJS version e892c9fdb

Description An incorrect numeric conversion occurs in the jsR isindex() function within jsrun.c. A specially crafted JavaScript input featuring an excessively large numeric array index can cause an out-of-range floating-point value to be converted to an integer without proper range validation. This leads to undefined behavior and can cause process termination, resulting in a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.