CVE-2022-25044

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2022-25044

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-25044.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2022-25044

Published

2022-03-05T01:01:56Z

Modified

2026-10-28T10:27:31Z

Summary

[none]

Details

Espruino 2v11.251 was discovered to contain a stack buffer overflow via src/jsvar.c in jsvNewFromString.

Database specific

{
    "cna_assigner": "mitre",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/25xxx/CVE-2022-25044.json"
}

References

Affected packages

Git / github.com/espruino/espruino

Affected ranges

Type

GIT

Repo

https://github.com/espruino/espruino

Events

Introduced

Fixed

e069be2ecc5060ef47391716e4de94999595b260

Database specific

Show details

{
    "extracted_events": [
        {
            "range": [
                {
                    "fixed": "e069be2ecc5060ef47391716e4de94999595b260"
                }
            ],
            "source": "REFERENCES_COMMIT"
        }
    ]
}

Affected versions

Other

ESPRUINOBOARD_1v3_SEEED

HEXBADGE

PIXLJS_REV_1

PIXLJS_REV_1i

RELEASE_1V44

RELEASE_1V72

RELEASE_1V73

RELEASE_1V74

RELEASE_1V75

RELEASE_1V76

RELEASE_1V77

RELEASE_1V78

RELEASE_1V79

RELEASE_1V85

RELEASE_1V86

RELEASE_1V87

RELEASE_1V88

RELEASE_1V89

RELEASE_1V90

RELEASE_1V91

RELEASE_1V92

RELEASE_1V93

RELEASE_1V94

RELEASE_1V95

RELEASE_1V96

RELEASE_1V97

RELEASE_1V98

RELEASE_1V99

RELEASE_2V02

RELEASE_2V03

RELEASE_2V04

RELEASE_2V05

RELEASE_2V06

RELEASE_2V07

RELEASE_2V10

RELEASE_2V11

RELEASE_2V12

esp-2015-10-04

esp8266-2015-10-01

esp8266-2015-10-03

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-25044.json"

vanir_signatures

[
    {
        "deprecated": false,
        "digest": {
            "function_hash": "183534199683585297038242780085008388696",
            "length": 581
        },
        "id": "CVE-2022-25044-7a4eeae7",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espruino/espruino/commit/e069be2ecc5060ef47391716e4de94999595b260",
        "target": {
            "file": "src/jsparse.c",
            "function": "jspeFactorDelete"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "8514533970817429151739433938175302576",
                "332620660270808809440700382537929178040",
                "6963062287911570808844270246398503819",
                "14552859321107556714280078703586296923",
                "216353557904275181409014678796258323675",
                "323921590761951129724731079861921453473",
                "199959408756333564317831730111425954689",
                "197106198080913204868084811358755421653",
                "195621535702430605596067019921111268633",
                "1731296276873691226571403542068573705",
                "51410187818939960624687106794939903714"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2022-25044-918538b3",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/espruino/espruino/commit/e069be2ecc5060ef47391716e4de94999595b260",
        "target": {
            "file": "src/jsparse.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "279024442679083080148249912454503437247",
            "length": 851
        },
        "id": "CVE-2022-25044-cae70f16",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espruino/espruino/commit/e069be2ecc5060ef47391716e4de94999595b260",
        "target": {
            "file": "src/jsparse.c",
            "function": "jspGetNamedFieldInParents"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "335601964102373636178271740798691674897",
                "80739213206965561144511046191892591830",
                "31333042479596123774925430177683294458",
                "309247518933414525564846450962429130956",
                "101117671929050811382583190010976943280",
                "30754132919233216587412716528862756136",
                "120055855743948022772681801680072668317",
                "305443247806069837700322061252504575387"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2022-25044-cee49154",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/espruino/espruino/commit/e069be2ecc5060ef47391716e4de94999595b260",
        "target": {
            "file": "src/jsvar.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "330282460812069402722258353734410210664",
            "length": 1151
        },
        "id": "CVE-2022-25044-e25a5ed4",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espruino/espruino/commit/e069be2ecc5060ef47391716e4de94999595b260",
        "target": {
            "file": "src/jsvar.c",
            "function": "jsvAddName"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "127079923881251677636544425108656314634",
            "length": 1011
        },
        "id": "CVE-2022-25044-fd8ef2f7",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/espruino/espruino/commit/e069be2ecc5060ef47391716e4de94999595b260",
        "target": {
            "file": "src/jsvar.c",
            "function": "jsvRemoveChild"
        }
    }
]

vanir_signatures_modified

"2026-10-28T10:27:31Z"