The vulnerability of the UltraJSON programming language package in Python, related to integer overflow, allows attackers to trigger a service failure.

🗓️ 13 Apr 2026 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

UltraJSON Python package has an integer overflow vulnerability that can cause remote service failures.

Reporter	Title	Published	Views	Family All 42
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a memory leak or buffer overflow in UltraJSON [CVE-2026-32874, CVE-2026-32875]	21 May 202615:13	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Developer Edition	12 Jun 202611:10	–	ibm
IBM Security Bulletins	Security Bulletin: UltraJSON Memory Leak in Large Integer Parsing Enables Denial of Service	4 May 202612:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance are vulnerable to denial of service (CVE-2026-32874, CVE-2026-32875)	25 Mar 202612:45	–	ibm
ATTACKERKB	CVE-2026-32875	20 Mar 202601:35	–	attackerkb
AlpineLinux	CVE-2026-32875	20 Mar 202601:35	–	alpinelinux
Chainguard	CVE-2026-32875 vulnerabilities	20 Mar 202601:17	–	cgr
Circl	CVE-2026-32875	22 Mar 202611:43	–	circl
CNNVD	UltraJSON 安全漏洞	20 Mar 202600:00	–	cnnvd
CVE	CVE-2026-32875	20 Mar 202601:35	–	cve

Source	Link
github	www.github.com/ultrajson/ultrajson/issues/700
github	www.github.com/ultrajson/ultrajson/security/advisories/GHSA-c8rr-9gxc-jprv
github	www.github.com/ultrajson/ultrajson/commit/486bd4553dc471a1de11613bc7347a6b318e37ea
web	www.web.nvd.nist.gov/view/vuln/detail

13 Apr 2026 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 37.5

CVSS 27.8

EPSS0.00469

UltraJSON vulnerability Python package flaw integer overflow remote service failure