ECHO-23C9-2F44-73C2 Integer overflow of the escape_characters counter in print_string_ptr() (cJSON.c). The counter is a size_t and the wrap needs ~858,993,460 control characters, i.e. a 32-bit size_t; the CVE text itself limits it to 32-bit platforms. Echo builds cjson only for amd64 and arm64, where size_t is 64-bit and the overflow cannot occur. There is no upstream fix to carry. Refs: - https://security-tracker.debian.org/tracker/CVE-2026-16554 - https://cert.pl/en/posts/2026/07/CVE-2026-16554 details: | Same reasoning as libssh2 CVE-2026-58050: 32-bit-only arithmetic overflow, Echo ships 64-bit builds only. Re-evaluate if a 32-bit architecture is ever added to this spec.

Bulletin has no description...