High severity8.8NVD Advisory· Published Nov 23, 2022· Updated Jun 17, 2026

CVE-2022-44789

Description

A logical issue in O_getOwnPropertyDescriptor() in Artifex MuJS 1.0.0 through 1.3.x before 1.3.2 allows an attacker to achieve Remote Code Execution through memory corruption, via the loading of a crafted JavaScript file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Artifex/Mujs3 versions
cpe:2.3:a:artifex:mujs:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:artifex:mujs:*:*:*:*:*:*:*:*range: >=1.0.0,<1.3.2
- (no CPE)
- (no CPE)range: 1.0.0 - 1.3.1
Debian/linux
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
Fedoraproject/Fedora
cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

github.com/alalng/CVE-2022-44789/blob/main/PublicReferenceURL.txtnvdPatchThird Party Advisory
github.com/ccxvii/mujs/commit/edb50ad66f7601ca9a3544a0e9045e8a8c60561fnvdPatchThird Party Advisory
github.com/ccxvii/mujs/releases/tag/1.3.2nvdRelease NotesThird Party Advisory
www.debian.org/security/2022/dsa-5291nvdThird Party Advisory
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MC6PLHTXHZ7GW7QQGTLBHLXL47UHTHXO/nvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000