The vulnerability of the cJSON_SetValuestring function in the cJSON.c library for working with JSON objects in C language allows a attacker to cause a service denial.

The vulnerability of the cJSONSetValuestring function in the cJSON.c library for working with JSON objects in C is related to pointer dereferencing errors involving NULL. Exploiting this vulnerability could allow an attacker to cause a service failure...

Astra Linux – Vulnerability in cjson

It has been discovered that cJSON v1.7.17 contains a segmentation violation, which can occur through the second parameter of the cJSONSetValuestring function in the cJSON.c library...

cJSON before 1.7.11 allows out-of-bounds access related to multiline comments.

...

CVE-2024-31755

cJSON v1.7.17 was discovered to contain a segmentation violation, which can trigger through the second parameter of function cJSONSetValuestring at cJSON.c...

cJSON 安全漏洞

cJSON is a lightweight open source JSON parser. A security vulnerability exists in cJSON version v1.7.17, which stems from the inclusion of a segmentation violation, and can be triggered by the second parameter of the cJSONSetValuestring function in cJSON.c. The vulnerability can be exploited by...

PT-2023-8736 · Cjson +6 · Cjson +6

Name of the Vulnerable Software and Affected Versions: cJSON version 1.7.16 Description: The issue is related to the cJSON InsertItemInArray function in the JSON-C library, which is used for processing JSON files in C. It is associated with pointer dereference errors. Exploitation of this issue m...

SUSE CVE-2016-4303

The parsestring function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service crash or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer overflow...

CVE-2019-1010239

DaveGamble/cJSON cJSON 1.7.8 is affected by: Improper Check for Unusual or Exceptional Conditions. The impact is: Null dereference, so attack can cause denial of service. The component is: cJSONGetObjectItemCaseSensitive function. The attack vector is: crafted json file. The fixed version is: 1.7...

PT-2019-5668 · Dave Gamble · Cjson

Name of the Vulnerable Software and Affected Versions: DaveGamble/cJSON versions 1.7.8 Description: The issue is related to an improper check for unusual or exceptional conditions, which can lead to a null dereference. This can cause a denial of service when a crafted JSON file is used as an atta...

AZL-41111 CVE-2019-11834 affecting package libglvnd for versions less than 1.7.0-2

cJSON before 1.7.11 allows out-of-bounds access, related to \x00 in a string literal...

AZL-41390 CVE-2019-11835 affecting package libglvnd for versions less than 1.7.0-2

cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments...

CVE-2019-11835

cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments...

CVE-2019-11834

cJSON before 1.7.11 allows out-of-bounds access, related to \x00 in a string literal...

CVE-2019-11834

cJSON before 1.7.11 allows out-of-bounds access, related to \x00 in a string literal...

CVE-2019-11835

cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments...

Cross site scripting

cJSON before 1.7.11 allows out-of-bounds access, related to \x00 in a string literal...

Cross site scripting

cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments...

CVE-2019-11835

cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments...

CVE-2019-11835

cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments...

CVE-2019-11834

cJSON before 1.7.11 allows out-of-bounds access, related to \x00 in a string literal...