Browse CVEs

HIGH 7.5 CVE-2026-67215 cJSON through 1.7.19 is vulnerable to uncontrolled recursion leading to stack exhaustion when an untrusted RFC 6902 JSON Patch is applied via cJSONUt… Cjson after 1.7.19 Fix from $1,9502026-07-29 HIGH 7.5 CVE-2026-67216 cJSON through 1.7.19 contains an inefficient algorithmic complexity flaw in cJSON_Compare(). When comparing objects, the function recurses into each … Cjson after 1.7.19 Fix from $1,9502026-07-29 MEDIUM 5.3 CVE-2026-67217 cJSON through 1.7.19 applies RFC 6902 JSON Patch operations non-atomically in apply_patch() in cJSON_Utils.c. For a replace operation that is missing… Cjson after 1.7.19 Fix from $1,6002026-07-29 CRITICAL 9.8 CVE-2025-57052 cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.c, allowing remote attackers t… Cjson after 1.7.18 Fix from $2,3002025-09-03 HIGH 7.5 CVE-2023-50471 cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_InsertItemInArray at cJSON.c. Cjson Patch available Fix from $1,9502023-12-14 HIGH 7.5 CVE-2023-50472 cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_SetValuestring at cJSON.c. Cjson Patch available Fix from $1,9502023-12-14 HIGH 7.5 CVE-2019-1010239 DaveGamble/cJSON cJSON 1.7.8 is affected by: Improper Check for Unusual or Exceptional Conditions. The impact is: Null dereference, so attack can cau… Cjson 18.1.3.1.0+ Fix from $1,9502019-07-19 CRITICAL 9.8 CVE-2019-11834 cJSON before 1.7.11 allows out-of-bounds access, related to \x00 in a string literal. Cjson 1.7.11 / 18.1.3.1.0+ Fix from $2,3002019-05-09 CRITICAL 9.8 CVE-2019-11835 cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments. Cjson 1.7.11 / 18.1.3.1.0+ Fix from $2,3002019-05-09 CRITICAL 9.8 CVE-2016-10749 parse_string in cJSON.c in cJSON before 2016-10-02 has a buffer over-read, as demonstrated by a string that begins with a " character and ends with a… Cjson 0.0.0+ Fix from $2,3002019-04-29 CRITICAL 9.8 CVE-2018-1000217 Dave Gamble cJSON version 1.7.3 and earlier contains a CWE-416: Use After Free vulnerability in cJSON library that can result in Possible crash, corr… Cjson 1.7.4+ Fix from $2,3002018-08-20 HIGH 8.8 CVE-2018-1000216 Dave Gamble cJSON version 1.7.2 and earlier contains a CWE-415: Double Free vulnerability in cJSON library that can result in Possible crash or RCE. … Cjson 1.7.3+ Fix from $1,9502018-08-20 HIGH 7.5 CVE-2018-1000215 Dave Gamble cJSON version 1.7.6 and earlier contains a CWE-772 vulnerability in cJSON library that can result in Denial of Service (DoS). This attack… Cjson after 1.7.6 Fix from $1,9502018-08-20