OSV-2025-547
Security exception in com.alibaba.fastjson2.JSONReader.readArray
No score
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=431584944
Crash type: Security exception
Crash state:
com.alibaba.fastjson2.JSONReader.readArray
java.base/java.nio.charset.CharsetEncoder.<init>
java.base/java.nio.charset.CharsetEncoder.<init>
What each source reports
OSV No score
Security exception in com.alibaba.fastjson2.JSONReader.readArray
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=431584944
Crash type: Security exception
Crash state:
com.alibaba.fastjson2.JSONReader.readArray
java.base/java.nio.charset.CharsetEncoder.<init>
java.base/java.nio.charset.CharsetEncoder.<init>
- Record
OSV-2025-547- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
fastjson2OSS-Fuzz |
Listed versions, plus commit ranges 2.0.322.0.332.0.34.1.android42.0.34.android42.0.35 Show 45 moreShow less2.0.35.android42.0.362.0.36.android42.0.372.0.37.android42.0.38.android42.0.392.0.39.android42.0.402.0.40.android42.0.412.0.41.android42.0.422.0.42.android2.0.432.0.43.android42.0.442.0.44.android2.0.452.0.45.android42.0.462.0.46.android42.0.46.android52.0.46.android82.0.472.0.47.android52.0.47.android82.0.482.0.48.android52.0.48.anroid82.0.492.0.49.android52.0.49.android82.0.502.0.50.android42.0.50.android82.0.512.0.51.android52.0.51.android82.0.522.0.52.android52.0.52.android82.0.532.0.53.android52.0.53.android8 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
OSV-2025-547 is a vulnerability with no CVSS score yet in fastjson2, published July 15, 2025. No source lists public exploit code. No source names a fixed version.
References
This page doesn't list everything
Left out here: 36 versions. The JSON record has them.