← All advisories

High severity7.5NVD Advisory· Published Apr 14, 2022· Updated Jun 17, 2026

CVE-2022-27008

CVE-2022-27008

Description

nginx njs 0.7.2 is vulnerable to Buffer Overflow. Type confused in Array.prototype.concat() when a slow array appended element is fast array.

Affected products

2

Nginx/Njsllm-fuzzy2 versions
<0.7.2+ 1 more
- (no CPE)range: <0.7.2
- (no CPE)

Patches

Vulnerability mechanics

References

3

github.com/nginx/njs/commit/e673ae41a998d1391bd562edb2ed6d49db7cc716nvdPatchThird Party Advisory
github.com/nginx/njs/issues/471nvdExploitIssue TrackingPatchThird Party Advisory
security.netapp.com/advisory/ntap-20220519-0008/nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.