EUVD-2026-49129

🗓️ 27 Jul 2026 08:40:17Reported by EUVDType

cJSON 32-bit print_string_ptr overflow causes heap overflow on large strings; confirmed 1.7.19.

Reporter	Title	Published	Views	Family All 7
ATTACKERKB	CVE-2026-16554	27 Jul 202608:40	–	attackerkb
Circl	CVE-2026-16554	27 Jul 202612:15	–	circl
CVE	CVE-2026-16554	27 Jul 202608:40	–	cve
Cvelist	CVE-2026-16554 Integer Overflow Leading to Heap Buffer Overflow in cJSON	27 Jul 202608:40	–	cvelist
NVD	CVE-2026-16554	27 Jul 202609:16	–	nvd
Positive Technologies	PT-2026-64863	27 Jul 202600:00	–	ptsecurity
Vulnrichment	CVE-2026-16554 Integer Overflow Leading to Heap Buffer Overflow in cJSON	27 Jul 202608:40	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "dca8634d-3e3c-30d7-9e4c-d2ed20fef457",
        "vendor": {
          "name": "DaveGamble"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "e64c5b5b-77d9-34fb-af8e-394fbbbe5cd3",
        "product": {
          "name": "cJSON",
          "vendor": {
            "name": "cJSON project"
          }
        },
        "product_version": "1.7.19"
      }
    ]
  }
]

Source	Link
cert	www.cert.pl/en/posts/2026/07/CVE-2026-16554
github	www.github.com/DaveGamble/cJSON

27 Jul 2026 10:24Current

6.4Medium risk

Vulners AI Score6.4

CVSS 45.1

SSVC