CVE-2020-22884: Espruino

Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days.

Buffer overflow vulnerability in function jsvGetStringChars in Espruino before RELEASE_2V09, allows remote attackers to execute arbitrary code.

Affected products

• Espruino Espruino: before 2.09 (fixed in 2.09)

Published 2021-07-13. Last modified 2026-06-17.