What’s Vulnerable › Vulnerabilities

CVE-2022-29368

• Severity: high (CVSS 7.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-05-12 · updated 2026-06-17
• Weakness: CWE-125

Description

Moddable commit before 135aa9a4a6a9b49b60aa730ebc3bcc6247d75c45 was discovered to contain an out-of-bounds read via the function fxUint8Getter at /moddable/xs/sources/xsDataView.c.

Affected products

• Moddable: through os220330

References

• https://github.com/Moddable-OpenSource/moddable/commit/135aa9a4a6a9b49b60aa730ebc3bcc6247d75c45
• https://github.com/Moddable-OpenSource/moddable/issues/896
• https://github.com/Moddable-OpenSource/moddable/commit/135aa9a4a6a9b49b60aa730ebc3bcc6247d75c45
• https://github.com/Moddable-OpenSource/moddable/issues/896

Get alerted when CVE-2022-29368 or the next vulnerability affects your stack