CVE-2023-26819

LOW EPSS 9.4%

Published Apr 19, 20251y ago · Modified Jun 17, 20262w ago

2.9 CVSS 3.1

Low

Published Apr 19, 2025 1y ago

Last Modified Jun 17, 2026 2w ago

Description

cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {"a": true, "b": [ null,9999999999999999999999999999999999999999999999912345678901234567]}.

CVSS Details

Base Score

2.9

Exploitability

1.4

Impact

1.4

Vector string

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Attack Vector Local

Attack Complexity High

Privileges Required None

User Interaction None

Scope Unchanged

Confidentiality None

Integrity None

Availability Low

Threat Intelligence

EPSS Exploit Probability

9.4% percentile

Exploit & Patch Status

Public Exploit Known

No Patch Available

Weaknesses 1

CWE-440

Affected Products 1

Vendor	Product	Version	Range
cjson_project	cjson	1.7.15	any

References 2

github.com https://github.com/boofish/json_bugs/tree/main/cjson

ExploitThird Party Advisory
lists.debian.org https://lists.debian.org/debian-lts-announce/2025/06/msg00014.html

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.