CVE-2022-45689

HIGH

hutool-json v5.8.10 was discovered to contain an out of memory error.

Affects 1 product across 1 vendor.

CVSS 3.17.5
EPSS0.8%
Percentile56th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no authentication required, no user interaction needed, impact contained to the vulnerable component, no confidentiality impact, no integrity impact, full availability impact.
CWE Weakness Definitions
CWE-787: Out-of-Bounds Write

Software writes data past buffer boundaries, corrupting memory and potentially enabling code execution.

◆ AI Analysis — automated analysis, not human-reviewed

hutool-json v5.8.10 contains an out of memory error that could lead to denial of service.

BSID: BS-2022-GLOBAL-336099-H • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2022-45689?
hutool-json v5.8.10 contains an out of memory error that could lead to denial of service.
What is the CVSS score for CVE-2022-45689?
CVE-2022-45689 has CVSS 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS: 0.8%.
Is CVE-2022-45689 actively exploited?
No confirmed active exploitation of CVE-2022-45689 as of 2026-05-30.
How do I remediate CVE-2022-45689?
Priority: HIGH.
What systems are affected by CVE-2022-45689?
CVE-2022-45689 affects Hutool Hutool.
Vulnerability Details
CVE IDCVE-2022-45689
BSIDBS-2022-GLOBAL-336099-H BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published2022-12-13
Last Modified2025-04-22
ICS Relevance15%
Weakness (CWE)
Out-of-Bounds Write
SourceNVD
Official Description

hutool-json v5.8.10 was discovered to contain an out of memory error.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

An attacker could exploit this vulnerability by sending specially crafted JSON data to the application, causing it to consume excessive memory and potentially crash.

Exploitation Likelihood: MEDIUM

Affected Products
VendorProductAffected Versions
Hutool Hutool 5.8.10
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 1402 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hash3992c843e28ea1b7fb3ae9c692d5726fceb6e6bf22d29f1172ca6fbccacfe4635e9335ff663c6ae4321849ecd929da1f095424b0779d86d139e29c71f92f5a04
Related CVEs affecting Hutool
CVE-2023-24163 9.8 SQL Inection vulnerability in Dromara hutool before 5.8.21 allows attacker to... CVE-2023-42276 9.8 hutool v5.8.21 was discovered to contain a buffer overflow via the component ... CVE-2022-22885 9.8 Hutool v5.7.18's HttpRequest was discovered to ignore all TLS/SSL certificate... CVE-2023-24162 9.8 Deserialization vulnerability in Dromara Hutool v5.8.11 allows attacker to ex... CVE-2023-42277 9.8 hutool v5.8.21 was discovered to contain a buffer overflow via the component ...
View all Hutool CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →