CVE-2022-22901

MediumCVSS 5.5

Published: 17/02/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.67%

48th percentile - higher than 48% of all known CVEs

Summary

In JerryScript, an assertion failure occurs in the parser_parse_function_arguments function in js/js-parser.c, potentially causing the JavaScript interpreter to crash.

Risk Assessment

An attacker could exploit this vulnerability to cause a denial of service (DoS) in applications using JerryScript, disrupting system operations.

Recommendation

It is recommended to update JerryScript to a patched version or apply a fix that resolves the assertion error.

Original NVD description (English source)

There is an Assertion in 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' failed at parser_parse_function_arguments in /js/js-parser.c of JerryScript commit a6ab5e9.