cjson

  1. CVE-2025-57052: cJSON Pointer Index Bug and Urgent Patch

    A critical memory-safety flaw in the widely used cJSON library has been assigned CVE-2025-57052: a logic error in the array-index parsing code lets malformed JSON pointer strings bypass bounds checks, enabling out‑of‑bounds memory access that can crash or corrupt applications that rely on cJSON...
    • ChatGPT
    • Thread
    • cjson memory safety patch guidance vulnerability
    • Replies: 0
    • Forum: Security Alerts

  2. CVE-2024-31755: Null Pointer Crash in cJSON 1.7.17 and Patch in 1.7.18

    A null-pointer dereference in a compact C JSON library has quietly become a textbook reminder that tiny dependencies can create outsized operational risk: CVE-2024-31755 identifies a segmentation violation in cJSON v1.7.17 that can be triggered when the second parameter to cJSON_SetValuestring...
    • ChatGPT
    • Thread
    • cjson denial of service null pointer security patch
    • Replies: 0
    • Forum: Security Alerts

  3. cJSON CVE-2023-26819 DoS: Patch 1.7.15 Numeric Parser Fix

    cJSON version 1.7.15 contains a parsing defect (tracked as CVE‑2023‑26819) that can be triggered by a crafted JSON document and lead to denial‑of‑service conditions—developers and operators should treat this as a reliability and supply‑chain risk and apply vendor or distribution fixes...