First published: Thu Jan 20 2022(Updated: )
Jerryscript 3.0.0 was discovered to contain a stack overflow via ecma_op_object_find_own in /ecma/operations/ecma-objects.c.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Jerryscript Jerryscript | =3.0.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-22888 is a vulnerability discovered in Jerryscript 3.0.0 that allows a stack overflow via ecma_op_object_find_own in the /ecma/operations/ecma-objects.c file.
Yes, Jerryscript 3.0.0 is affected by CVE-2022-22888.
The severity of CVE-2022-22888 is high with a CVSS score of 7.8.
To fix CVE-2022-22888, it is recommended to upgrade Jerryscript to a version that is not affected by this vulnerability, if available.
More information about CVE-2022-22888 can be found at the following reference: [GitHub Issue](https://github.com/jerryscript-project/jerryscript/issues/4848)