In Artifex MuJS through 1.2.0, jsP_dumpsyntax in jsdump.c has a NULL pointer dereference, as demonstrated by mujs-pp.
{
"cna_assigner": "mitre",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/30xxx/CVE-2022-30975.json"
}"2026-05-13T15:27:19Z"
[
{
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2022-30975-02ecc6c9",
"target": {
"file": "main.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"189929663709189282253047694127822926730",
"53758373923815090016347901737341074996",
"214173989899126323017866504564909441705",
"54918449198476766686256542768969895944"
],
"threshold": 0.9
},
"source": "https://github.com/ccxvii/mujs/commit/dd0a0972b4428771e6a3887da2210c7c9dd40f9c"
},
{
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2022-30975-61520966",
"target": {
"function": "main",
"file": "main.c"
},
"deprecated": false,
"digest": {
"function_hash": "97731289052404711353801306202252741205",
"length": 1795.0
},
"source": "https://github.com/ccxvii/mujs/commit/dd0a0972b4428771e6a3887da2210c7c9dd40f9c"
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-30975.json"