OSV-2024-1322
Security exception in com.alibaba.fastjson2.JSONReader.readObject
No scoreFix available
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=379180973
Crash type: Security exception
Crash state:
com.alibaba.fastjson2.JSONReader.readObject
java.base/java.nio.charset.CharsetEncoder.replaceWith
java.base/java.nio.charset.CharsetEncoder.<init>
What each source reports
OSV No score
Security exception in com.alibaba.fastjson2.JSONReader.readObject
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=379180973
Crash type: Security exception
Crash state:
com.alibaba.fastjson2.JSONReader.readObject
java.base/java.nio.charset.CharsetEncoder.replaceWith
java.base/java.nio.charset.CharsetEncoder.<init>
- Record
OSV-2024-1322- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
fastjson2OSS-Fuzz |
Listed versions, plus commit ranges 2.0.302.0.312.0.322.0.332.0.34.1.android4 Show 45 moreShow less2.0.34.android42.0.352.0.35.android42.0.362.0.36.android42.0.372.0.37.android42.0.38.android42.0.392.0.39.android42.0.402.0.40.android42.0.412.0.41.android42.0.422.0.42.android2.0.432.0.43.android42.0.442.0.44.android2.0.452.0.45.android42.0.462.0.46.android42.0.46.android52.0.46.android82.0.472.0.47.android52.0.47.android82.0.482.0.48.android52.0.48.anroid82.0.492.0.49.android52.0.49.android82.0.502.0.50.android42.0.50.android82.0.512.0.51.android52.0.51.android82.0.522.0.52.android52.0.52.android82.0.53 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
OSV-2024-1322 is a vulnerability with no CVSS score yet in fastjson2, published November 18, 2024. No source lists public exploit code. A source reports a fix.
References
This page doesn't list everything
Left out here: 29 versions. The JSON record has them.