{"id":"CVE-2026-88362","title":"MuJS e892c9fdb contains an incorrect numeric conversion vulnerability in jsR_isindex() in jsrun.c","summary":"MuJS e892c9fdb contains an incorrect numeric conversion vulnerability in jsR_isindex() in jsrun.c. A specially crafted JavaScript input containing an excessively large numeric array index can cause an out-of-range floating-point value to…","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-681"],"published":"2026-09-24","updated":"2026-09-25","sourceUpdated":"2026-09-25T17:17:17.660","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-88362","references":[{"url":"https://bugs.ghostscript.com/show_bug.cgi?id=709636","label":"cve@mitre.org"},{"url":"https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mujs.git/commit/?id=8a32c397b28fe45747ac4e9e4f3dca049825eda7","label":"cve@mitre.org"},{"url":"https://bugs.ghostscript.com/show_bug.cgi?id=709636","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","cve.org","exploit-available"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"yes","technicalImpact":"partial","timestamp":"2026-09-25T16:15:23.278438Z"},"ingestedAt":"2026-09-24T15:45:56.654Z","epss":0.00416,"epssPercentile":0.35683,"slug":"CVE-2026-88362","body":"## Overview\n\nMuJS e892c9fdb contains an incorrect numeric conversion vulnerability in jsR_isindex() in jsrun.c. A specially crafted JavaScript input containing an excessively large numeric array index can cause an out-of-range floating-point value to be converted to an integer without proper range validation. This results in undefined behavior and can cause process termination, leading to denial of service.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":53,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":211088,"id":"CVE-2026-88362","ts":1790356448808,"field":"exploit_available","old":"false","new":"true"},{"seq":211087,"id":"CVE-2026-88362","ts":1790356448808,"field":"cvss","old":null,"new":"7.5"},{"seq":211086,"id":"CVE-2026-88362","ts":1790356448808,"field":"severity","old":"none","new":"high"}]}