CVE-2022-43286

published 2022-10-28

CVE-2022-43286: Nginx NJS v0.7.2 was discovered to contain a heap-use-after-free bug caused by illegal memory copy in the function njs_json_parse_iterator_call at njs_json.c.

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

Nginx NJS v0.7.2 was discovered to contain a heap-use-after-free bug caused by illegal memory copy in the function njs_json_parse_iterator_call at njs_json.c.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
f5	njs	—	—

CWE-416