Vaadin android-json resource management error vulnerability

Versions of Vaadin Android JSON prior to 0.0.20131108.1 contain a resource management error vulnerability. This vulnerability arises because the org.json parser lacks depth restrictions on nested structures; as a result, JSONTokener.nextValue recursively calls readArray and readObject. In cases o...

JSON-java: parser confusion leads to OOM

A flaw was found in the org.json package. A bug in the parser exists, and an input string may lead to undefined usage of memory, leading to an out-of-memory error, causing a denial of service DoS...