CVE-2010-1666
Improper Restriction of Operations within the Bounds of a Memory Buffer in python-cjson
CVE-2010-1666 is a medium vulnerability (CVSS 6.8) in Dan Pascu Python-cjson, published July 2, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.67%, the 76th percentile. Fixed in python-cjson 1.0.5.1.
Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows context-dependent attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors involving crafted Unicode input to the cjson.encode function.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows context-dependent attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors involving crafted Unicode input to the cjson.encode function.
- Record
CVE-2010-1666- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows context-dependent attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors involving crafted Unicode input to the cjson.encode function.
- Record
CVE-2010-1666- Updated
- 2026-11-02
EUVDEUVD-2010-0029 No score
Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows context-dependent attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors involving crafted Unicode input to the cjson.encode function.
- Record
EUVD-2010-0029- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cqmh-mpx2-g633
Improper Restriction of Operations within the Bounds of a Memory Buffer in python-cjson
Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows context-dependent attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors involving crafted Unicode input to the cjson.encode function.
- Record
GHSA-cqmh-mpx2-g633- CVSS 4.0
- 6.9 Medium
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N - Weakness
- CWE-119
- Updated
- 2026-11-02
OSVGHSA-cqmh-mpx2-g633
Improper Restriction of Operations within the Bounds of a Memory Buffer in python-cjson
Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows context-dependent attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors involving crafted Unicode input to the cjson.encode function.
- Record
GHSA-cqmh-mpx2-g633- CVSS 4.0
- 6.9 Medium
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N - Weakness
- CWE-119
- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11259-1 No score
python36-python-cjson-1.2.2-2.5 on GA media
These are all security issues fixed in the python36-python-cjson-1.2.2-2.5 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11259-1- Updated
- 2026-11-02
OSVPYSEC-2010-30 No score
Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows context-dependent attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors involving crafted Unicode input to the cjson.encode function.
- Record
PYSEC-2010-30- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
python-cjsonPyPI |
through 1.0.5 | 1.0.5.1 |
python-cjsonDebian:5.0 |
before 1.0.5-1+lenny1, plus listed versions 1.0.5-1 |
1.0.5-1+lenny1 |
python-cjsonPyPI |
before 1.0.5.1, plus listed versions 1.0.01.0.11.0.21.0.31.0.41.0.5 |
1.0.5.1 |
python-cjsonPyPI |
before 1.1.0, plus listed versions 1.0.01.0.11.0.21.0.31.0.41.0.5 |
1.1.0 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |