cJSON Project records
3 published records for vendor cjson project.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Attack profile
All records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
30Monitor | CVE-2024-31755No exploit | cJSON v1.7.17 was discovered to contain a segmentation violation, which can trigger through the second parameter of function cJSON_SetValuescjson project · cjson · CWE-476 | High7.6 | — | 0.6% | Apr 25, 2024 |
22Monitor | CVE-2023-53154No exploit | parse_string in cJSON before 1.7.18 has a heap-based buffer over-read via {"1":1, with no trailing newline if cJSON_ParseWithLength is callecjson project · cjson · CWE-125 | Medium5.5 | — | 0.2% | May 23, 2025 |
11Monitor | CVE-2023-26819No exploit | cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {"a": true, "b": [ null,99999999999999999999999999999999999cjson project · cjson · CWE-440 | Low2.9 | — | 0.2% | Apr 19, 2025 |
- CVE-2024-3175530Monitor
cJSON v1.7.17 was discovered to contain a segmentation violation, which can trigger through the second parameter of function cJSON_SetValues
HighCVSS 7.6No exploitEPSS 0%cjson project · cjsonApr 25, 2024
- CVE-2023-5315422Monitor
parse_string in cJSON before 1.7.18 has a heap-based buffer over-read via {"1":1, with no trailing newline if cJSON_ParseWithLength is calle
MediumCVSS 5.5No exploitEPSS 0%cjson project · cjsonMay 23, 2025
- CVE-2023-2681911Monitor
cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {"a": true, "b": [ null,99999999999999999999999999999999999
LowCVSS 2.9No exploitEPSS 0%cjson project · cjsonApr 19, 2025