CVE-2019-1010239

2019-07-1917:15:11

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.7%

JSON

DaveGamble/cJSON cJSON 1.7.8 is affected by: Improper Check for Unusual or Exceptional Conditions. The impact is: Null dereference, so attack can cause denial of service. The component is: cJSON_GetObjectItemCaseSensitive() function. The attack vector is: crafted json file. The fixed version is: 1.7.9 and later.

CPENameOperatorVersion
cjsoneq1.7.4
cjsoneq1.5.7
cjsoneq1.4.5
cjsoneq1.0.1
cjsoneq1.4.2
cjsoneq1.7.7
cjsoneq1.1.0
cjsoneq1.7.2
cjsoneq1.4.6
cjsoneq1.5.2