Astra Linux – vulnerability in cjson

cJSON versions 1.5.0 through 1.7.18 allow out-of-bounds access via the decodearrayindexfrompointer function in cJSONUtils.c. This enables remote attackers to bypass array bounds checks and access restricted data by using malformed JSON pointer strings containing alphanumeric characters...