There is a heap-buffer-overflow at jmem-poolman.c:165 in jmempoolscollect_empty in JerryScript 2.2.0.