Approved changes feed: RSS · Atom

cpe:2.3:a:artifex:mujs:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorArtifex (0075fabc-cec9-5063-a004-04a5c9db1a9b)
ProductMujs (a2254e98-ee27-5160-9545-4188ab95f3e8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/mujs purl2cpe 2026-06-01 10:15:00.022975
pkg:deb/ubuntu/mujs purl2cpe 2026-06-01 10:15:00.022977
pkg:github/artifexsoftware/mujs purl2cpe 2026-06-01 10:15:00.022979
pkg:github/ccxvii/mujs purl2cpe 2026-06-01 10:15:00.022981
pkg:rpm/fedora/mujs purl2cpe 2026-06-01 10:15:00.022982
pkg:rpm/opensuse/mujs purl2cpe 2026-06-01 10:15:00.022984

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-44789 vulnerable 2026-06-08 05:49:36.401121 Details available
A logical issue in O_getOwnPropertyDescriptor() in Artifex MuJS 1.0.0 through 1.3.x before 1.3.2 allows an attacker to achieve Remote Code Execution through memory corruption, via the loading of a crafted JavaScript file.
Published: 2022-11-23T00:00:00.000Z
Updated: 2025-04-25T19:51:11.137Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30975 vulnerable 2026-06-08 05:43:39.907810 Details available
In Artifex MuJS through 1.2.0, jsP_dumpsyntax in jsdump.c has a NULL pointer dereference, as demonstrated by mujs-pp.
Published: 2022-05-18T00:00:00.000Z
Updated: 2024-08-03T07:03:40.286Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30974 vulnerable 2026-06-08 05:43:39.907264 Details available
compile in regexp.c in Artifex MuJS through 1.2.0 results in stack consumption because of unlimited recursion, a different issue than CVE-2019-11413.
Published: 2022-05-18T00:00:00.000Z
Updated: 2024-08-03T07:03:40.098Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33797 vulnerable 2026-06-08 05:32:12.499142 Details available
Buffer-overflow in jsdtoa.c in Artifex MuJS in versions 1.0.1 to 1.1.1. An integer overflow happens when js_strtod() reads in floating point exponent, which leads to a buffer overflow in the pointer *d.
Published: 2023-04-17T00:00:00.000Z
Updated: 2025-02-06T16:51:47.788Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33796 vulnerable 2026-06-08 05:32:12.497277 Details available
CRITICAL (10)
In MuJS before version 1.1.2, a use-after-free flaw in the regexp source property access may cause denial of service.
Published: 2023-07-07T17:55:00.630Z
Updated: 2024-11-12T19:49:00.304Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-24343 vulnerable 2026-06-08 05:22:32.820820 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-22886 vulnerable 2026-06-08 05:22:31.693073 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-22885 vulnerable 2026-06-08 05:22:31.692457 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6191 vulnerable 2026-06-08 05:11:53.433961 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-5759 vulnerable 2026-06-08 05:11:51.908050 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5628 vulnerable 2026-06-08 05:09:47.373864 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5627 vulnerable 2026-06-08 05:09:47.373428 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9294 vulnerable 2026-06-08 05:08:23.211086 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9136 vulnerable 2026-06-08 05:08:22.687984 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9108 vulnerable 2026-06-08 05:08:22.601943 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9017 vulnerable 2026-06-08 05:08:22.428861 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-7506 vulnerable 2026-06-08 05:08:12.938478 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-7505 vulnerable 2026-06-08 05:08:12.938150 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-7504 vulnerable 2026-06-08 05:08:12.937746 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-10141 vulnerable 2026-06-08 05:07:17.406126 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-10133 vulnerable 2026-06-08 05:07:17.388831 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-10132 vulnerable 2026-06-08 05:07:17.388322 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.