CVE-2022-24834

Improvement of CVE-2022-24834 public exploit Author Conviso Research Team Description The team at Ricerca Security @RicercaSec discovered and successfully exploited a interesting vulnerability CVE-2022-24834 in the Lua interpreter included with Redis. This vulnerability is a heap overflow in the...

Razer Sila Gaming Router - Remote Code Execution

A command injection in the command parameter of Razer Sila Gaming Router v2.0.441api-2.0.418 allows attackers to execute arbitrary commands via a crafted POST request. id: CVE-2022-29013 info: name: Razer Sila Gaming Router - Remote Code Execution author: DhiyaneshDK severity: critical descriptio...

Astra Linux – Vulnerability in cjson

In versions of cJSON 1.5.0 through 1.7.18, the decodearrayindexfrompointer function in cJSONUtils.c allows for out-of-bounds access. This enables remote attackers to bypass array bounds checking and access restricted data through malformed JSON pointer strings containing alphanumeric characters...

Astra Linux – Vulnerability in Redis

Redis is an in-memory database that persists data on disk. A specially crafted Lua script executed in Redis can trigger a heap overflow in the cjson library, leading to heap corruption and potentially remote code execution. This issue exists in all versions of Redis that support Lua scripting,...

Astra Linux – Vulnerability in cjson

It has been discovered that cJSON v1.7.16 contains a segmentation violation due to the use of the cJSONSetValuestring function in the cJSON.c file...

Astra Linux – Vulnerability in cjson

It has been discovered that cJSON v1.7.17 contains a segmentation violation, which can occur through the second parameter of the cJSONSetValuestring function in the cJSON.c library...

Rocky Linux 9 [CIQ] Security Update: redis / redis-debuginfo / redis-debugsource / redis-devel / etc Multiple Vulnerabilities (crlsa-2025_0693)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20250693 advisory. redis: heap overflow in the lua cjson and cmsgpack libraries CVE-2022-24834 redis: possible bypass of Unix socket permissions on startup CVE-2023-45145...

AlmaLinux 9.2 [TuxCare] Security Update: redis / redis-devel / redis-doc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1752089153)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1752089153 advisory. - Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a heap overflo...

ROOT-OS-ALPINE-323-CVE-2026-67215 CVE-2026-67215 in cjson - Patched by Root

Root has patched CVE-2026-67215 in the cjson package for Root:Alpine:3.23. Multiple fixed versions available...

ROOT-OS-ALPINE-323-CVE-2026-16554 CVE-2026-16554 in cjson - Patched by Root

Root has patched CVE-2026-16554 in the cjson package for Root:Alpine:3.23. Multiple fixed versions available...

ROOT-OS-ALPINE-323-CVE-2026-67216 CVE-2026-67216 in cjson - Patched by Root

Root has patched CVE-2026-67216 in the cjson package for Root:Alpine:3.23. Multiple fixed versions available...

ROOT-OS-ALPINE-321-CVE-2026-67215 CVE-2026-67215 in cjson - Patched by Root

Root has patched CVE-2026-67215 in the cjson package for Root:Alpine:3.21. Multiple fixed versions available...

ROOT-OS-ALPINE-321-CVE-2026-16554 CVE-2026-16554 in cjson - Patched by Root

Root has patched CVE-2026-16554 in the cjson package for Root:Alpine:3.21. Multiple fixed versions available...

ROOT-OS-ALPINE-321-CVE-2026-67216 CVE-2026-67216 in cjson - Patched by Root

Root has patched CVE-2026-67216 in the cjson package for Root:Alpine:3.21. Multiple fixed versions available...

grounded-vuln-confirmation

Grounded Vulnerability Confirmation A vulnerability is only...

Astra Linux – Vulnerability in cjson

cJSON 1.7.15 may allow a denial of service through a crafted JSON document, such as "a": true, "b": null,9999999999999999999999999999999999999999999999912345678901234567...

Astra Linux – Vulnerability in cjson

It has been discovered that cJSON v1.7.16 contains a segmentation violation due to the use of the cJSONInsertItemInArray function in the cJSON.c library...

CVE-2026-87933

A flaw was found in DaveGamble cJSON. The cJSONUtilsMergePatch function in cJSONUtils.c is vulnerable to a use-after-free error. A remote attacker could exploit this memory corruption vulnerability, potentially leading to information disclosure, data corruption, or denial of service...

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free in the cJSONUtilsMergePatch function. An attacker can execute arbitrary code or cause a denial of service by triggering a use-after-free condition remotely. Remediation A fix was pushed into the master branch but not yet...

DEBIAN-CVE-2026-87933

A vulnerability was found in DaveGamble cJSON up to 1.7.19. The affected element is the function cJSONUtilsMergePatch of the file cJSONUtils.c. The manipulation results in use after free. The attack may be launched remotely. The exploit has been made public and could be used. The pull request to...