| 标题 | DaveGamble/cJSON cJSON 1.5.0/1.7.18 Memory Corruption |
|---|
| 描述 | A critical vulnerability exists in the cJSON library (cJSON_Utils.c, function decode_array_index_from_pointer) that allows attackers to bypass array bounds checks, potentially causing out-of-bounds memory access, segmentation faults, and denial of service, by exploiting improper input validation in JSON pointer parsing. |
|---|
| 来源 | ⚠️ https://x-0r.com/posts/cJSON-Array-Index-Parsing-Vulnerability |
|---|
| 用户 | x-0r (UID 89573) |
|---|
| 提交 | 2025-08-27 22時36分 (1 年前) |
|---|
| 管理 | 2025-09-11 07時35分 (14 days later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 322398 [cJSON 直到 1.7.18 cJSON_Utils.c decode_array_index_from_pointer 内存损坏] |
|---|
| 积分 | 0 |
|---|