Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-98j5-4649-rfv2

Опубликовано: 03 сент. 2025
Источник: github
Github: Не прошло ревью

Описание

cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.c, allowing remote attackers to bypass array bounds checking and access restricted data via malformed JSON pointer strings containing alphanumeric characters.

cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.c, allowing remote attackers to bypass array bounds checking and access restricted data via malformed JSON pointer strings containing alphanumeric characters.

EPSS

Процентиль: 21%
0.00066
Низкий

Связанные уязвимости

CVSS3: 9.8
ubuntu
5 дней назад

cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.c, allowing remote attackers to bypass array bounds checking and access restricted data via malformed JSON pointer strings containing alphanumeric characters.

CVSS3: 7.5
redhat
6 дней назад

cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.c, allowing remote attackers to bypass array bounds checking and access restricted data via malformed JSON pointer strings containing alphanumeric characters.

CVSS3: 9.8
nvd
5 дней назад

cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.c, allowing remote attackers to bypass array bounds checking and access restricted data via malformed JSON pointer strings containing alphanumeric characters.

CVSS3: 9.8
debian
5 дней назад

cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_ ...

EPSS

Процентиль: 21%
0.00066
Низкий