CVE-2023-26819

Affected: cJSON Project cJSON

cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {"a": true, "b": [ null,9999999999999999999999999999999999999999999999912345678901234567]}.

USN-7973-1 — cjson vulnerabilities

Affected: Ubuntu:Pro:20.04:LTS: cjson, Ubuntu:22.04:LTS: cjson, Ubuntu:Pro:24.04:LTS: cjson, Ubuntu:25.10: cjson

It was discovered that cJSON incorrectly handled parsing large numbers. An attacker could possibly use this issue to cause a denial of service. (CVE-2023-26819)

It was discovered that cJSON may perform out-of-bounds read when processing specially crafted JSON files using parse_object. An attacker could possibly use this issue to expose sensitive information or crash the program. (CVE-2023-53154)

It was discovered that cJSON incorrectly validated array indices in JSON pointers, which could result in an out-of-bounds memory access. An attacker could possibly use this issue to cause a denial of service, or execute arbitrary code. (CVE-2025-57052)

Most recent entries from all

CVE-2023-26819

USN-7973-1 — cjson vulnerabilities