CVE-2022-23459

CVE-2022-23459 concerns the jsonxx/Json++ C++ JSON parser. The vulnerability arises in the Value class: its default assignment operator may be used with pointer types that reference data which is not updated, enabling memory corruption via double free or use-after-free. Multiple connected sources...

CVE-2022-23460

Jsonxx/Json++ (C++) has a stack-exhaustion vulnerability in the json parsing path, potentially causing Denial of Service on affected builds. The issue is observed in the current commit and is associated with ASAN builds; the project is archived and updates are not expected. Several sources (NVD, ...