CVE-2019-1010239

2019-07-1916:41:01

dwf

www.cve.org

7.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.7%

JSON

DaveGamble/cJSON cJSON 1.7.8 is affected by: Improper Check for Unusual or Exceptional Conditions. The impact is: Null dereference, so attack can cause denial of service. The component is: cJSON_GetObjectItemCaseSensitive() function. The attack vector is: crafted json file. The fixed version is: 1.7.9 and later.

CNA Affected

[
  {
    "product": "cJSON",
    "vendor": "DaveGamble/cJSON",
    "versions": [
      {
        "status": "affected",
        "version": "1.7.8 [fixed: 1.7.9 and later]"
      }
    ]
  }
]