PT-2022-15720 · Unknown · Jerryscript

Published 2022-01-20 · Updated 2022-01-27 · CVE-2022-22892

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Jerryscripts version 3.0.0

Description The issue is related to an assertion failure in the Jerryscripts software. The failed assertion is 'ecma is value undefined (value) || ecma is value null (value) || ecma is value boolean (value) || ecma is value number (value) || ecma is value string (value) || ecma is value bigint (value) || ecma is value symbol (value) || ecma is value object (value)' at jerry-core/ecma/base/ecma-helpers-value.c.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Assertion Failure

Weakness Enumeration

CWE-617

Related Identifiers

CVE-2022-22892

Affected Products

Jerryscript

References · 7

• 🔥 https://github.com/jerryscript-project/jerryscript/issues/4872 · Exploit
• https://osv.dev/vulnerability/CVE-2022-22892 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-22892 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22892 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-22892 · Security Note
• https://ubuntu.com/security/CVE-2022-22892 · Vendor Advisory
• https://t.me/cvenotify/25881 · Telegram Post