TI-2023-29450 CVE-2023-53154 · GHSA-8h4w-44qv-79mq
Out-of-bounds read in cJSON
Priority MEDIUM 58
parse_string in cJSON before 1.7.18 has a heap-based buffer over-read via {"1":1, with no trailing newline if cJSON_ParseWithLength is called.
Vulnerabilities
3 records
TI-2023-11788 CVE-2023-26819 · GHSA-whx8-2789-8w4w
cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {"a"…
Priority MEDIUM 48
cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {"a": true, "b": [ null,9999999999999999999999999999999999999999999999912345678901234567]}.
TI-2024-20921 CVE-2024-31755 · GHSA-5g69-hr8r-x577
cJSON v1.7.17 was discovered to contain a segmentation violation, which can trigger…
Priority HIGH 66
cJSON v1.7.17 was discovered to contain a segmentation violation, which can trigger through the second parameter of function cJSON_SetValuestring at cJSON.c.