CVE-2026-12067 AvastSvc denial of service via unhandled JsonCpp exceptions in native message handlers

Missing exception handlers in AvastSvc native message dispatcher ashServ.dll on Windows allow a local, unprivileged attacker to crash the service by sending specially crafted JSON messages. The vulnerability spans multiple handler pathways in the RPC-based native message protocol: LogNmSvc.messag...

CVE-2026-12067

The AvastSvc native message dispatcher (ashServ.dll) on Windows is vulnerable to a denial of service due to missing exception handlers during the processing of RPC-based native messages. A local, unprivileged attacker can crash the service by sending specially crafted JSON messages that trigger u...

jsoncpp:jsoncpp_fuzzer: Use-of-uninitialized-value in Json::OurReader::parse

Detailed Report: https://oss-fuzz.com/testcase?key=5740748428541952 Project: jsoncpp Fuzzing Engine: libFuzzer Fuzz Target: jsoncppfuzzer Job Type: libfuzzermsanjsoncpp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: Json::OurReader::parse...

jsoncpp:jsoncpp_fuzzer: Heap-buffer-overflow in Json::OurReader::parse

Project: https://github.com/open-source-parsers/jsoncpp.git Detailed Report: https://oss-fuzz.com/testcase?key=5702838429941760 Project: jsoncpp Fuzzing Engine: afl Fuzz Target: jsoncppfuzzer Job Type: aflasanjsoncpp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

WS-2020-0319

JsonCpp in version 00.11.0 is vulnerable to heap-buffer-overflow in jsonreader...

jsoncpp:jsoncpp_fuzzer: Heap-buffer-overflow in Json::OurReader::readComment

Project: https://github.com/open-source-parsers/jsoncpp.git Detailed Report: https://oss-fuzz.com/testcase?key=4831282042765312 Project: jsoncpp Fuzzing Engine: libFuzzer Fuzz Target: jsoncppfuzzer Job Type: libfuzzerasanjsoncpp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

CPP-Ethereum JSON-RPC Denial Of Service Vulnerabilities

Summary An exploitable unhandled exception vulnerability exists in multiple APIs of CPP-Ethereum’s JSON-RPC. Specially crafted JSON requests can cause a unhandled exception resulting in denial of service. An attacker can send malicious JSON to trigger this vulnerability. Tested Versions Ethereum...