CVE-2023-53154

CVE-2023-53154 affects the cJSON JSON parser. A heap-based buffer over-read occurs in parse_string when parsing input like {"1":1, with no trailing newline, using cJSON_ParseWithLength; vulnerable in versions before 1.7.18. Distributed advisories note the issue and recommend upgrading to a patche...

CVE-2024-31755

CVE-2024-31755 affects cJSON v1.7.17, where a segmentation fault can be triggered via the second parameter to cJSON_SetValuestring in cJSON.c. The Connected documents corroborate exploitation in multiple Linux distributions and advisories, e.g., Fedora/Fedora security updates reference cjson-1.7....

CVE-2023-26819

CVE-2023-26819 affects the cJSON library (v1.7.15) and can cause a denial of service when parsing crafted JSON like {"a": true, "b": [null, 9999...}] with extremely large numbers. Public advisories (Ubuntu USN-7973-1; Debian DLA-4216) confirm vulnerable package versions and provide fixes in subse...