{"id":"CVE-2022-35173","details":"An issue was discovered in Nginx NJS v0.7.5. The JUMP offset for a break instruction was not set to a correct offset during code generation, leading to a segmentation violation.","modified":"2026-08-12T13:32:33.029031Z","published":"2022-08-18T05:08:54Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/35xxx/CVE-2022-35173.json"},"references":[{"type":"WEB","url":"http://hg.nginx.org/njs/rev/b7c4e0f714a9"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/35xxx/CVE-2022-35173.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-35173"},{"type":"REPORT","url":"https://github.com/nginx/njs/issues/553"},{"type":"FIX","url":"https://github.com/nginx/njs/commit/404553896792b8f5f429dc8852d15784a59d8d3e"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/nginx/njs","events":[{"introduced":"37dc1e788060ba17cdcd6e3fd2695177c9d7aa38"},{"fixed":"404553896792b8f5f429dc8852d15784a59d8d3e"}],"database_specific":{"cpe":"cpe:2.3:a:nginx:njs:0.7.5:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0.7.5"},{"last_affected":"0.7.5"}],"source":["CPE_STRING","REFERENCES"]}}],"versions":["0.7.5"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-35173.json","vanir_signatures_modified":"2026-08-12T13:32:33Z","vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://github.com/nginx/njs/commit/404553896792b8f5f429dc8852d15784a59d8d3e","target":{"file":"src/njs_generator.c","function":"njs_generate_try_end"},"deprecated":false,"digest":{"function_hash":"304029516047076007140133536908263875321","length":1546},"id":"CVE-2022-35173-4378f8a0"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/nginx/njs/commit/404553896792b8f5f429dc8852d15784a59d8d3e","target":{"file":"src/njs_generator.c"},"deprecated":false,"digest":{"line_hashes":["224699747579391325238831959343261633136","52056593301345868156133187946512523968","185166471147926133279267508134815891530","223962460441088112010421191931167778567","111285792979142093917006186897021375080","11419336829417016789537071884973585241","108587633537507210242609878158511307392","253754656440548818088749855167038233632","119396003708655793939043004706493753335","202894104238663237536306831230273595496","304285341048027117825203959884466812487","261703387443705524283148283861347027165","223962460441088112010421191931167778567","111285792979142093917006186897021375080","11419336829417016789537071884973585241","321650022450988414625152546050505572726"],"threshold":0.9},"id":"CVE-2022-35173-489a113a"},{"deprecated":false,"digest":{"function_hash":"308183539393987763383279632380141094769","length":1199},"id":"CVE-2022-35173-e548101c","signature_type":"Function","signature_version":"v1","source":"https://github.com/nginx/njs/commit/404553896792b8f5f429dc8852d15784a59d8d3e","target":{"file":"src/njs_generator.c","function":"njs_generate_try_catch"}},{"digest":{"line_hashes":["68824721654271214470007509025733089349","119537499777861277673241192577645023772","46047927877222704196910641765542344296","215122680273465019952994184342902706408","236361956205353044532968203584505879341"],"threshold":0.9},"id":"CVE-2022-35173-f5a9baa4","signature_type":"Line","signature_version":"v1","source":"https://github.com/nginx/njs/commit/404553896792b8f5f429dc8852d15784a59d8d3e","target":{"file":"src/test/njs_unit_test.c"},"deprecated":false}]}}],"schema_version":"1.9.0"}