CJ
Product
cJSON
16
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 10Medium 1Low 0
Watch
Add cJSON to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-57052 | 9.8 | Sep 3 | cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.c, allowing remote attackers to bypass array bounds checking… Affected: 1.5.0 through 1.7.18 |
| CVE-2019-11835 | 9.8 | May 9 | cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments Affected: before 1.7.11 |
| CVE-2019-11834 | 9.8 | May 9 | cJSON before 1.7.11 allows out-of-bounds access, related to \x00 in a string literal Affected: before 1.7.11 |
| CVE-2016-10749 | 9.8 | Apr 29 | parse_string in cJSON.c in cJSON before 2016-10-02 has a buffer over-read, as demonstrated by a string that begins with a " character and ends with a \ character Affected: before 0.0.0 |
| CVE-2018-1000217 | 9.8 | Aug 20 | Dave Gamble cJSON version 1.7.3 and earlier contains a CWE-416: Use After Free vulnerability in cJSON library that can result in Possible crash, corruption of data or even RCE Affected: before 1.7.4 |
Showing 5