CVE-2018-17072

JSON++ through 2016-06-15 has a buffer over-read in yyparse in json.y...