Cross site scripting

cJSON before 1.7.11 allows out-of-bounds access, related to \x00 in a string literal...

CVE-2019-11835

cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments...

CVE-2019-11834

cJSON before 1.7.11 allows out-of-bounds access, related to \x00 in a string literal...

Cross site scripting

cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments...

CVE-2019-11835

cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments...

CVE-2019-11835

CVE-2019-11835 affects the cJSON library prior to 1.7.11, where parsing issues with multiline comments enable out-of-bounds access. Impact per sources: high severity (CVSS 3.1 base 9.8; NETWORK, LOW complexity, NONE privileges). Affected: cJSON before 1.7.11. Remediation: upgrade to 1.7.11 or lat...

CVE-2019-11835

cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments...

CVE-2019-11834

CVE-2019-11834 affects cJSON before 1.7.11, allowing out-of-bounds access related to a null byte in a string literal. Public documents corroborate the issue across multiple feeds; one entry ties it to libglvnd

CVE-2019-11834

cJSON before 1.7.11 allows out-of-bounds access, related to \x00 in a string literal...

CVE-2019-11834

cJSON before 1.7.11 allows out-of-bounds access, related to \x00 in a string literal...

PT-2019-12517 · Cjson · Cjson

Name of the Vulnerable Software and Affected Versions: cJSON versions prior to 1.7.11 Description: The issue allows out-of-bounds access, related to x00 in a string literal. Recommendations: For versions prior to 1.7.11, update to version 1.7.11 or later to resolve the issue...

PT-2019-12518 · Dave Gamble · Cjson

Name of the Vulnerable Software and Affected Versions: cJSON versions prior to 1.7.11 Description: The issue allows out-of-bounds access, related to multiline comments. Recommendations: For versions prior to 1.7.11, update to version 1.7.11 or later to resolve the issue...

CVE-2016-10749

parsestring in cJSON.c in cJSON before 2016-10-02 has a buffer over-read, as demonstrated by a string that begins with a " character and ends with a \ character...

CVE-2016-10749

parsestring in cJSON.c in cJSON before 2016-10-02 has a buffer over-read, as demonstrated by a string that begins with a " character and ends with a \ character...

Buffer overflow

parsestring in cJSON.c in cJSON before 2016-10-02 has a buffer over-read, as demonstrated by a string that begins with a " character and ends with a \ character...

CVE-2016-10749

parsestring in cJSON.c in cJSON before 2016-10-02 has a buffer over-read, as demonstrated by a string that begins with a " character and ends with a \ character...

CVE-2016-10749

parsestring in cJSON.c in cJSON before 2016-10-02 has a buffer over-read, as demonstrated by a string that begins with a " character and ends with a \ character...

CVE-2016-10749

CVE-2016-10749 affects the cJSON project. The vulnerability is a buffer over-read in the function that parses strings in cJSON.c , triggered by a string that starts with a double quote (" ) and ends with a backslash (). Impact is described as a buffer over-read; no exploit specifics are provided ...

CVE-2016-10749

parsestring in cJSON.c in cJSON before 2016-10-02 has a buffer over-read, as demonstrated by a string that begins with a " character and ends with a \ character...

PT-2019-7545 · Cjson · Cjson

Name of the Vulnerable Software and Affected Versions: cJSON versions prior to 2016-10-02 Description: The issue is related to a buffer over-read in the parse string function in cJSON.c. This occurs when processing a string that starts with a " character and ends with a character. Recommendations...