CVE-2022-22895: Jerryscript

High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Jerryscript 3.0.0 was discovered to contain a heap-buffer-overflow via ecma_utf8_string_to_number_by_radix in /jerry-core/ecma/base/ecma-helpers-conversion.c.

Affected products

• Jerryscript Jerryscript: version 3.0.0 only

Published 2022-01-21. Last modified 2026-06-17.