{"id":"CVE-2022-30974","aliases":["ALPINE-CVE-2022-30974","DEBIAN-CVE-2022-30974","DSA-5291-1","EUVD-2022-52690","GHSA-x9pv-h28p-55w8","OESA-2022-1976","UBUNTU-CVE-2022-30974","USN-7575-1","openSUSE-SU-2024:12091-1"],"status":"published","title":"compile in regexp.c in Artifex MuJS through 1.2.0 results in stack consumption because of...","description":"compile in regexp.c in Artifex MuJS through 1.2.0 results in stack consumption because of unlimited recursion, a different issue than CVE-2019-11413.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01151,"percentile":0.67132,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-674"],"published":"2022-05-18T00:00:00Z","modified":"2026-11-03T08:03:52Z","fixes":[{"ecosystem":"Alpine:v3.17","package":"mujs","fixed_in":["1.3.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"mujs","fixed_in":["1.3.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"mujs","fixed_in":["1.3.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"mujs","fixed_in":["1.3.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"mujs","fixed_in":["1.3.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"mujs","fixed_in":["1.3.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"mujs","fixed_in":["1.3.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"mujs","fixed_in":["1.3.0-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"mujs","fixed_in":["1.2.0-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"mujs","fixed_in":["1.2.0-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"mujs","fixed_in":["1.2.0-3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"mujs","fixed_in":["1.1.3-3ubuntu0.1~esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.17","package":"mujs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"mujs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"mujs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"mujs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"mujs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"mujs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"mujs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"mujs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"mujs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"mujs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"mujs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-3"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"mujs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-1+deb11u2"}]}],"versions":["1.1.0-1","1.1.0-1+deb11u1"],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"mujs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-2.oe2203"}]}],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"mujs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3-3ubuntu0.1~esm1"}]}],"versions":["1.1.0-1","1.1.3-2","1.1.3-3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"mujs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3-3ubuntu0.1~esm1"}]}],"versions":["1.1.0-1","1.1.3-2","1.1.3-3"],"bundled":3}],"products":[{"vendor":"artifex","product":"mujs"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"}],"references":[{"url":"https://github.com/ccxvii/mujs/issues/162","tags":["x_transferred","Exploit","Issue Tracking","Patch","Third Party Advisory","report"]},{"url":"https://www.debian.org/security/2022/dsa-5291","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MC6PLHTXHZ7GW7QQGTLBHLXL47UHTHXO/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30974","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MC6PLHTXHZ7GW7QQGTLBHLXL47UHTHXO/"},{"url":"https://github.com/advisories/GHSA-x9pv-h28p-55w8"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-30974","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/30xxx/CVE-2022-30974.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-30974","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1976","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30975","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7504","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9108","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5627","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7506","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9017","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5628","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-10141","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9136","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-30974","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-30974","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7575-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-45005","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-30975","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30974","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2022-30974","description":"compile in regexp.c in Artifex MuJS through 1.2.0 results in stack consumption because of unlimited recursion, a different issue than CVE-2019-11413.","status":"published","published":"2022-05-18T00:00:00Z","modified":"2024-08-03T07:03:40.098Z","updated_at":"2026-11-02T14:34:31.184134Z"}],"euvd":[{"id":"EUVD-2022-52690","description":"compile in regexp.c in Artifex MuJS through 1.2.0 results in stack consumption because of unlimited recursion, a different issue than CVE-2019-11413.","status":"published","published":"2022-05-18T00:00:00Z","modified":"2024-08-03T07:03:40Z","updated_at":"2026-11-03T03:25:34.735493Z"}],"ghsa":[{"id":"GHSA-x9pv-h28p-55w8","title":"compile in regexp.c in Artifex MuJS through 1.2.0 results in stack consumption because of...","description":"compile in regexp.c in Artifex MuJS through 1.2.0 results in stack consumption because of unlimited recursion, a different issue than CVE-2019-11413.","status":"published","published":"2022-05-19T00:00:41Z","modified":"2023-01-28T05:06:53Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-674"],"updated_at":"2026-11-02T14:44:28.28087Z"}],"nvd":[{"id":"CVE-2022-30974","description":"compile in regexp.c in Artifex MuJS through 1.2.0 results in stack consumption because of unlimited recursion, a different issue than CVE-2019-11413.","status":"published","published":"2022-05-18T11:15:15.337Z","modified":"2026-06-17T04:44:33.043Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-674"],"updated_at":"2026-11-02T14:07:20.264424Z"}],"osv":[{"id":"ALPINE-CVE-2022-30974","description":"compile in regexp.c in Artifex MuJS through 1.2.0 results in stack consumption because of unlimited recursion, a different issue than CVE-2019-11413.","status":"published","published":"2022-05-18T11:15:15.337Z","modified":"2026-11-03T07:30:50.880777605Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T07:50:01.054176Z"},{"id":"DEBIAN-CVE-2022-30974","description":"compile in regexp.c in Artifex MuJS through 1.2.0 results in stack consumption because of unlimited recursion, a different issue than CVE-2019-11413.","status":"published","published":"2022-05-18T11:15:15.337Z","modified":"2026-11-03T08:03:52.661595593Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T08:23:57.167851Z"},{"id":"OESA-2022-1976","title":"mujs security update","description":"MuJS is a lightweight Javascript interpreter designed for embedding in other software to extend them with scripting capabilities.\r\n\r\nSecurity Fix(es):\r\n\r\nIn Artifex MuJS through 1.2.0, jsP_dumpsyntax in jsdump.c has a NULL pointer dereference, as demonstrated by mujs-pp.(CVE-2022-30975)\r\n\r\ncompile in regexp.c in Artifex MuJS through 1.2.0 results in stack consumption because of unlimited recursion, a different issue than CVE-2019-11413.(CVE-2022-30974)\r\n\r\nA use-after-free vulnerability was observed in Rp_toString function of Artifex Software, Inc. MuJS before 5c337af4b3df80cf967e4f9f6a21522de84b392a. A successful exploitation of this issue can lead to code execution or denial of service condition.(CVE-2016-7504)\r\n\r\nInteger overflow in the js_regcomp function in regexp.c in Artifex Software, Inc. MuJS before commit b6de34ac6d8bb7dd5461c57940acfbd3ee7fd93e allows attackers to cause a denial of service (application crash) via a crafted regular expression.(CVE-2016-9108)\r\n\r\nAn issue was discovered in Artifex Software, Inc. MuJS before 4006739a28367c708dea19aeb19b8a1a9326ce08. The jsR_setproperty function in jsrun.c lacks a check for a negative array length. This leads to an integer overflow in the js_pushstring function in jsrun.c when parsing a specially crafted JS file.(CVE-2017-5627)\r\n\r\nAn out-of-bounds read vulnerability was observed in Sp_replace_regexp function of Artifex Software, Inc. MuJS before 5000749f5afe3b956fc916e407309de840997f4a. A successful exploitation of this issue can lead to code execution or denial of service condition.(CVE-2016-7506)\r\n\r\nArtifex Software, Inc. MuJS before a5c747f1d40e8d6659a37a8d25f13fb5acf8e767 allows context-dependent attackers to obtain sensitive information by using the \u0026quot;opname in crafted JavaScript file\u0026quot; approach, related to an \u0026quot;Out-of-Bounds read\u0026quot; issue affecting the jsC_dumpfunction function in the jsdump.c component.(CVE-2016-9017)\r\n\r\nAn issue was discovered in Artifex Software, Inc. MuJS before 8f62ea10a0af68e56d5c00720523ebcba13c2e6a. The MakeDay function in jsdate.c does not validate the month, leading to an integer overflow when parsing a specially crafted JS file.(CVE-2017-5628)\r\n\r\nAn integer overflow vulnerability was observed in the regemit function in regexp.c in Artifex Software, Inc. MuJS before fa3d30fd18c348bb4b1f3858fb860f4fcd4b2045. The attack requires a regular expression with nested repetition. A successful exploitation of this issue can lead to code execution or a denial of service (buffer overflow) condition.(CVE-2016-10141)\r\n\r\nArtifex Software, Inc. MuJS before a0ceaf5050faf419401fe1b83acfa950ec8a8a89 allows context-dependent attackers to obtain sensitive information by using the \u0026quot;crafted JavaScript\u0026quot; approach, related to a \u0026quot;Buffer Over-read\u0026quot; issue.(CVE-2016-9136)","status":"published","published":"2022-09-30T11:05:17Z","modified":"2026-08-18T01:17:19.036417974Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"UBUNTU-CVE-2022-30974","description":"compile in regexp.c in Artifex MuJS through 1.2.0 results in stack consumption because of unlimited recursion, a different issue than CVE-2019-11413.","status":"published","published":"2022-05-18T11:15:00Z","modified":"2026-04-22T13:21:54.184684Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:53:53.899276Z"},{"id":"CVE-2022-30974","description":"compile in regexp.c in Artifex MuJS through 1.2.0 results in stack consumption because of unlimited recursion, a different issue than CVE-2019-11413.","status":"published","published":"2022-05-18T00:00:00Z","modified":"2026-10-28T02:31:03.314754357Z","updated_at":"2026-11-02T15:44:25.516981Z"},{"id":"DSA-5291-1","title":"mujs - security update","status":"published","published":"2022-11-28T00:00:00Z","modified":"2026-03-09T02:10:58.500543Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"openSUSE-SU-2024:12091-1","title":"mujs-1.2.0-3.1 on GA media","description":"These are all security issues fixed in the mujs-1.2.0-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:13:18.129776Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"USN-7575-1","title":"mujs vulnerabilities","description":"It was discovered that MuJS did not correctly handle try/finally\nstatements, which could lead to a buffer overflow. An attacker could\npossibly use this issue to cause a denial of service or execute \narbitrary code. (CVE-2021-45005)\n\nHan Zheng discovered that MuJS did not correctly handle recursion, which\ncould lead to stack exhaustion. An attacker could possibly use this\nissue to cause a denial of service. (CVE-2022-30974)\n\nHan Zheng discovered that MuJS did not correctly handle certain memory\noperations. An attacker could possibly use this issue to cause a denial\nof service. (CVE-2022-30975)","status":"published","published":"2025-06-18T01:26:06Z","modified":"2026-04-27T18:03:45.186321Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}