CVE-2022-44789: Artifex Mujs

High severity, CVSS 8.8. EPSS: 2.5% chance of exploitation in the next 30 days.

A logical issue in O_getOwnPropertyDescriptor() in Artifex MuJS 1.0.0 through 1.3.x before 1.3.2 allows an attacker to achieve Remote Code Execution through memory corruption, via the loading of a crafted JavaScript file.

Affected products

• Artifex Mujs: from 1.0.0, before 1.3.2 (fixed in 1.3.2)
• Debian Debian Linux: version 11.0 only
• Fedoraproject Fedora: version 37 only

Published 2022-11-23. Last modified 2026-06-17.