CVE-2026-124586

Tencent RapidJSON 1.1.0 contains a vulnerability in the GetCachedPowerByIndex function located in include/rapidjson/internal/diyfp.h. An attacker can manipulate the decimalPosition argument to trigger an out-of-bounds read . This vulnerability can be exploited remotely , and the exploit has been ...