Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8h4w-44qv-79mq

Опубликовано: 23 мая 2025
Источник: github
Github: Не прошло ревью
CVSS3: 2.9

Описание

parse_string in cJSON before 1.7.18 has a heap-based buffer over-read via {"1":1, with no trailing newline if cJSON_ParseWithLength is called.

parse_string in cJSON before 1.7.18 has a heap-based buffer over-read via {"1":1, with no trailing newline if cJSON_ParseWithLength is called.

EPSS

Процентиль: 20%
0.00278
Низкий

2.9 Low

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 1 года назад

parse_string in cJSON before 1.7.18 has a heap-based buffer over-read via {"1":1, with no trailing newline if cJSON_ParseWithLength is called.

CVSS3: 5.1
redhat
больше 1 года назад

parse_string in cJSON before 1.7.18 has a heap-based buffer over-read via {"1":1, with no trailing newline if cJSON_ParseWithLength is called.

CVSS3: 5.5
nvd
больше 1 года назад

parse_string in cJSON before 1.7.18 has a heap-based buffer over-read via {"1":1, with no trailing newline if cJSON_ParseWithLength is called.

CVSS3: 2.9
msrc
3 месяца назад

parse_string in cJSON before 1.7.18 has a heap-based buffer over-read via {"1":1, with no trailing newline if cJSON_ParseWithLength is called.

CVSS3: 5.5
debian
больше 1 года назад

parse_string in cJSON before 1.7.18 has a heap-based buffer over-read ...

EPSS

Процентиль: 20%
0.00278
Низкий

2.9 Low

CVSS3

Дефекты

CWE-125