DA
Vendor
DaveGamble
16
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-87933 | CJ cJSON DaveGamble | 7.3 | Sep 10 | DaveGamble cJSON cJSON_Utils.c cJSONUtils_MergePatch use after free |
| CVE-2026-29036 | CJ cJSON DaveGamble | 7.5 | Aug 11 | cJSON 1.7.19 Wrong-Key Modification via JSON Pointer Escape Decoding |
| CVE-2026-67217 | CJ cJSON DaveGamble | 5.3 | Jul 29 | cJSON JSON Patch Non-Atomic Application Destroys Data Before Validation |
| CVE-2026-67216 | CJ cJSON DaveGamble | 7.5 | Jul 29 | cJSON cJSON_Compare Exponential Complexity Denial of Service |
| CVE-2026-67215 | CJ cJSON DaveGamble | 7.5 | Jul 29 | cJSON JSON Patch copy/add Uncontrolled Recursion Stack Exhaustion |
| CVE-2026-16554 | CJ cJSON DaveGamble | 7.8 | Jul 27 | Integer Overflow Leading to Heap Buffer Overflow in cJSON |
| CVE-2025-57052 | CJ Cjson Davegamble | 9.8 | Sep 3 | cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.c, allowing remote attackers to bypass array bounds checking… |
| CVE-2023-50472 | CJ Cjson Davegamble | 7.5 | Dec 14 | cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_SetValuestring at cJSON.c |
| CVE-2023-50471 | CJ Cjson Davegamble | 7.5 | Dec 14 | cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_InsertItemInArray at cJSON.c |
| CVE-2019-1010239 | CJ Cjson Davegamble | 7.5 | Jul 19 | DaveGamble/cJSON cJSON 1.7.8 is affected by: Improper Check for Unusual or Exceptional Conditions |
| CVE-2019-11835 | CJ Cjson Davegamble | 9.8 | May 9 | cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments |
| CVE-2019-11834 | CJ Cjson Davegamble | 9.8 | May 9 | cJSON before 1.7.11 allows out-of-bounds access, related to \x00 in a string literal |
| CVE-2016-10749 | CJ Cjson Davegamble | 9.8 | Apr 29 | parse_string in cJSON.c in cJSON before 2016-10-02 has a buffer over-read, as demonstrated by a string that begins with a " character and ends with a \ character |
| CVE-2018-1000216 | CJ Cjson Davegamble | 8.8 | Aug 20 | Dave Gamble cJSON version 1.7.2 and earlier contains a CWE-415: Double Free vulnerability in cJSON library that can result in Possible crash or RCE |
| CVE-2018-1000217 | CJ Cjson Davegamble | 9.8 | Aug 20 | Dave Gamble cJSON version 1.7.3 and earlier contains a CWE-416: Use After Free vulnerability in cJSON library that can result in Possible crash, corruption of data or even RCE |
| CVE-2018-1000215 | CJ Cjson Davegamble | 7.5 | Aug 20 | Dave Gamble cJSON version 1.7.6 and earlier contains a CWE-772 vulnerability in cJSON library that can result in Denial of Service (DoS) |