CVE-2022-29368: Moddable

High severity, CVSS 7.1. EPSS: 0.9% chance of exploitation in the next 30 days.

Moddable commit before 135aa9a4a6a9b49b60aa730ebc3bcc6247d75c45 was discovered to contain an out-of-bounds read via the function fxUint8Getter at /moddable/xs/sources/xsDataView.c.

Affected products

  • Moddable Moddable: up to and including os220330

Published 2022-05-12. Last modified 2026-06-17.