DaveGamble

Records16All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

DaveGamble records in CISA KEV

No DaveGamble vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cjson 14 records HIGH

Records

14 records in Cjson · all components

TI-2025-35424 CVE-2025-57052 · GHSA-98j5-4649-rfv2

cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the…

HIGH 82

cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.c, allowing remote attackers to bypass array bounds checking and access restricted data via malformed…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00743 Published 2025-09-03 Fixed CWE-125

TI-2023-27613 CVE-2023-50472 · GHSA-278h-99f9-m238

cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_SetValuestring at cJSON.c.

HIGH 72

cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_SetValuestring at cJSON.c.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00969 Published 2023-12-14 Fixed CWE-476

TI-2026-47533 CVE-2026-67217 · GHSA-pr46-97qf-f32c

cJSON JSON Patch Non-Atomic Application Destroys Data Before Validation

HIGH 70

cJSON through 1.7.19 applies RFC 6902 JSON Patch operations non-atomically in apply_patch() in cJSON_Utils.c.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00433 Published 2026-07-29 No fix listed CWE-696

TI-2026-47532 CVE-2026-67216 · GHSA-ff2v-f99f-wm3f

cJSON cJSON_Compare Exponential Complexity Denial of Service

HIGH 69

cJSON through 1.7.19 contains an inefficient algorithmic complexity flaw in cJSON_Compare().

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00645 Published 2026-07-29 No fix listed CWE-407

TI-2019-08871 CVE-2019-11835 · GHSA-3x2j-h977-v75r

cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments.

MEDIUM 47

cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02556 Published 2019-05-09 No fix listed CWE-125

TI-2019-08870 CVE-2019-11834 · GHSA-f8rc-mjx7-r7jf

cJSON before 1.7.11 allows out-of-bounds access, related to \x00 in a string literal.

MEDIUM 47

cJSON before 1.7.11 allows out-of-bounds access, related to \x00 in a string literal.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02521 Published 2019-05-09 No fix listed CWE-125

TI-2016-08787 CVE-2016-10749 · GHSA-6q52-cg2r-w8jw

parse_string in cJSON.c in cJSON before 2016-10-02 has a buffer over-read, as…

MEDIUM 47

parse_string in cJSON.c in cJSON before 2016-10-02 has a buffer over-read, as demonstrated by a string that begins with a " character and ends with a \ character.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02489 Published 2019-04-29 No fix listed CWE-125

TI-2018-15863 CVE-2018-1000217 · GHSA-cmxj-54mf-j4q3

Dave Gamble cJSON version 1.7.3 and earlier contains a CWE-416: Use After Free…

MEDIUM 46

Dave Gamble cJSON version 1.7.3 and earlier contains a CWE-416: Use After Free vulnerability in cJSON library that can result in Possible crash, corruption of data or even RCE.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01753 Published 2018-08-20 No fix listed CWE-416

TI-2026-47531 CVE-2026-67215 · GHSA-5q3m-r3x7-8phg

cJSON JSON Patch copy/add Uncontrolled Recursion Stack Exhaustion

MEDIUM 45

cJSON through 1.7.19 is vulnerable to uncontrolled recursion leading to stack exhaustion when an untrusted RFC 6902 JSON Patch is applied via cJSONUtils_ApplyPatches() or cJSONUtils_ApplyPatchesCaseSensitive().

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.007 Published 2026-07-29 No fix listed CWE-674

TI-2018-15862 CVE-2018-1000216 · GHSA-3g82-r8f2-r5vq

Dave Gamble cJSON version 1.7.2 and earlier contains a CWE-415: Double Free vulnerability…

MEDIUM 41

Dave Gamble cJSON version 1.7.2 and earlier contains a CWE-415: Double Free vulnerability in cJSON library that can result in Possible crash or RCE.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01471 Published 2018-08-20 No fix listed CWE-415

TI-2019-16034 CVE-2019-1010239 · GHSA-fqq7-vx9f-v496

NULL pointer dereference in DaveGamble/cJSON cJSON

LOW 37

DaveGamble/cJSON cJSON 1.7.8 is affected by: Improper Check for Unusual or Exceptional Conditions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02418 Published 2019-07-19 No fix listed CWE-476

TI-2023-27612 CVE-2023-50471 · GHSA-xgc4-4vwx-6v94

cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_InsertItemInArray at cJSON.c.

LOW 36

cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_InsertItemInArray at cJSON.c.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01521 Published 2023-12-14 Fixed CWE-476

TI-2018-15861 CVE-2018-1000215 · GHSA-9xc3-9g76-hcvx

Dave Gamble cJSON version 1.7.6 and earlier contains a CWE-772 vulnerability in cJSON…

LOW 36

Dave Gamble cJSON version 1.7.6 and earlier contains a CWE-772 vulnerability in cJSON library that can result in Denial of Service (DoS).

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01691 Published 2018-08-20 No fix listed CWE-772

TI-2026-13812 CVE-2026-16554 · GHSA-qv6q-8g2j-w47g

Integer Overflow Leading to Heap Buffer Overflow in cJSON

LOW 23

cJSON library is vulnerable to an integer overflow in the print_string_ptr() function in cJSON.c on 32-bit platforms.

CVSS 4.0MEDIUM 5.1 Local No auth No interaction EPSS 0.00367 Published 2026-07-27 No fix listed CWE-190

Open these records in search →

Critical	5
High	8
Medium	3
Low	0
No CVSS	0