{"id":"CVE-2022-25044","details":"Espruino 2v11.251 was discovered to contain a stack buffer overflow via src/jsvar.c in jsvNewFromString.","modified":"2026-10-28T10:27:31.598338378Z","published":"2022-03-05T01:01:56Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/25xxx/CVE-2022-25044.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/25xxx/CVE-2022-25044.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25044"},{"type":"REPORT","url":"https://github.com/espruino/Espruino/issues/2142"},{"type":"FIX","url":"https://github.com/espruino/Espruino/commit/e069be2ecc5060ef47391716e4de94999595b260"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/espruino/espruino","events":[{"introduced":"0"},{"fixed":"e069be2ecc5060ef47391716e4de94999595b260"}],"database_specific":{"extracted_events":[{"source":"REFERENCES_COMMIT","range":[{"fixed":"e069be2ecc5060ef47391716e4de94999595b260"}]}]}}],"versions":["RELEASE_2V12","RELEASE_2V11","RELEASE_2V10","RELEASE_2V07","RELEASE_2V06","RELEASE_2V05","RELEASE_2V04","RELEASE_2V03","RELEASE_2V02","RELEASE_1V99","RELEASE_1V98","PIXLJS_REV_1i","RELEASE_1V97","RELEASE_1V96","PIXLJS_REV_1","RELEASE_1V95","HEXBADGE","RELEASE_1V94","RELEASE_1V93","RELEASE_1V92","RELEASE_1V91","RELEASE_1V89","RELEASE_1V90","RELEASE_1V88","RELEASE_1V87","RELEASE_1V86","RELEASE_1V85","esp-2015-10-04","esp8266-2015-10-03","esp8266-2015-10-01","RELEASE_1V79","RELEASE_1V78","RELEASE_1V77","RELEASE_1V76","RELEASE_1V75","RELEASE_1V74","RELEASE_1V73","RELEASE_1V72","RELEASE_1V44","ESPRUINOBOARD_1v3_SEEED"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-25044.json","vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"183534199683585297038242780085008388696","length":581},"id":"CVE-2022-25044-7a4eeae7","signature_type":"Function","signature_version":"v1","source":"https://github.com/espruino/espruino/commit/e069be2ecc5060ef47391716e4de94999595b260","target":{"function":"jspeFactorDelete","file":"src/jsparse.c"}},{"target":{"file":"src/jsparse.c"},"deprecated":false,"digest":{"line_hashes":["8514533970817429151739433938175302576","332620660270808809440700382537929178040","6963062287911570808844270246398503819","14552859321107556714280078703586296923","216353557904275181409014678796258323675","323921590761951129724731079861921453473","199959408756333564317831730111425954689","197106198080913204868084811358755421653","195621535702430605596067019921111268633","1731296276873691226571403542068573705","51410187818939960624687106794939903714"],"threshold":0.9},"id":"CVE-2022-25044-918538b3","signature_type":"Line","signature_version":"v1","source":"https://github.com/espruino/espruino/commit/e069be2ecc5060ef47391716e4de94999595b260"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/espruino/espruino/commit/e069be2ecc5060ef47391716e4de94999595b260","target":{"file":"src/jsparse.c","function":"jspGetNamedFieldInParents"},"deprecated":false,"digest":{"length":851,"function_hash":"279024442679083080148249912454503437247"},"id":"CVE-2022-25044-cae70f16"},{"id":"CVE-2022-25044-cee49154","signature_type":"Line","signature_version":"v1","source":"https://github.com/espruino/espruino/commit/e069be2ecc5060ef47391716e4de94999595b260","target":{"file":"src/jsvar.c"},"deprecated":false,"digest":{"line_hashes":["335601964102373636178271740798691674897","80739213206965561144511046191892591830","31333042479596123774925430177683294458","309247518933414525564846450962429130956","101117671929050811382583190010976943280","30754132919233216587412716528862756136","120055855743948022772681801680072668317","305443247806069837700322061252504575387"],"threshold":0.9}},{"digest":{"length":1151,"function_hash":"330282460812069402722258353734410210664"},"id":"CVE-2022-25044-e25a5ed4","signature_type":"Function","signature_version":"v1","source":"https://github.com/espruino/espruino/commit/e069be2ecc5060ef47391716e4de94999595b260","target":{"file":"src/jsvar.c","function":"jsvAddName"},"deprecated":false},{"id":"CVE-2022-25044-fd8ef2f7","signature_type":"Function","signature_version":"v1","source":"https://github.com/espruino/espruino/commit/e069be2ecc5060ef47391716e4de94999595b260","target":{"file":"src/jsvar.c","function":"jsvRemoveChild"},"deprecated":false,"digest":{"length":1011,"function_hash":"127079923881251677636544425108656314634"}}],"vanir_signatures_modified":"2026-10-28T10:27:31Z"}}],"schema_version":"1.9.2"}