إرسال #642812: DaveGamble/cJSON cJSON 1.5.0/1.7.18 Memory Corruptionالمعلومات

عنوانDaveGamble/cJSON cJSON 1.5.0/1.7.18 Memory Corruption
الوصفA critical vulnerability exists in the cJSON library (cJSON_Utils.c, function decode_array_index_from_pointer) that allows attackers to bypass array bounds checks, potentially causing out-of-bounds memory access, segmentation faults, and denial of service, by exploiting improper input validation in JSON pointer parsing.
المصدر⚠️ https://x-0r.com/posts/cJSON-Array-Index-Parsing-Vulnerability
المستخدم
 x-0r (UID 89573)
ارسال27/08/2025 10:36 PM (1 سنة منذ)
الاعتدال11/09/2025 07:35 AM (14 days later)
الحالةمكرر
إدخال VulDB322398 [cJSON حتى 1.7.18 cJSON_Utils.c decode_array_index_from_pointer تلف الذاكرة]
النقاط0

Interested in the pricing of exploits?

See the underground prices here!