{"id":"CVE-2020-12762","aliases":["ALPINE-CVE-2020-12762","ALSA-2021:4382","ALSA-2023:6431","ALSA-2023:6976","AZL-6506","BELL-CVE-2020-12762","CLSA-2025-1751141300","CLSA-2025-1751892313","CLSA-2026-1791551522","DEBIAN-CVE-2020-12762","DLA-2228-1","DLA-2228-2","DLA-2301-1","DLA-3461-1","DLA-4258-1","DSA-4741-1","EUVD-2020-5047","GHSA-3797-gmjf-45gm","MGASA-2020-0240","MGASA-2023-0159","OESA-2023-1186","RHSA-2021:4382","RHSA-2023:6431","RHSA-2023:6976","RHSA-2024:0411","RHSA-2024:0573","RHSA-2024:1086","RHSA-2024:1154","RLSA-2021:4382","RLSA-2023:6431","RLSA-2023:6976","SUSE-SU-2022:0184-1","SUSE-SU-2022:0184-2","SUSE-SU-2022:3001-1","SUSE-SU-2023:2135-1","SUSE-SU-2024:1775-1","SUSE-SU-2024:1846-1","UBUNTU-CVE-2020-12762","USN-4360-1","USN-4360-4","openSUSE-SU-2022:0184-1","openSUSE-SU-2024:12911-1"],"status":"published","title":"json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as...","description":"json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01895,"percentile":0.79795,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190","CWE-787"],"published":"2020-05-09T00:00:00Z","modified":"2026-11-05T19:45:02Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"json-c","fixed_in":["0.13.1-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"json-c","fixed_in":["0.13.1-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"json-c","fixed_in":["0.14-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"json-c","fixed_in":["0.14-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"json-c","fixed_in":["0.14-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"json-c","fixed_in":["0.14-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"json-c","fixed_in":["0.14-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"json-c","fixed_in":["0.14-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"json-c","fixed_in":["0.14-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"json-c","fixed_in":["0.14-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"json-c","fixed_in":["0.14-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"json-c","fixed_in":["0.14-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"json-c","fixed_in":["0.14-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"json-c","fixed_in":["0.14-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"json-c","fixed_in":["0.14-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"json-c","fixed_in":["0.13.1-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"libfastjson","fixed_in":["1.2304.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"libfastjson","fixed_in":["1.2304.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"libfastjson","fixed_in":["1.2304.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"libfastjson","fixed_in":["1.2304.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"libfastjson","fixed_in":["1.2304.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"libfastjson","fixed_in":["1.2304.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"libfastjson","fixed_in":["1.2304.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"libfastjson","fixed_in":["1.2304.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"libfastjson","fixed_in":["1.2304.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"libfastjson","fixed_in":["1.2304.0-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"json-c-devel","fixed_in":["0.13.1-2.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"json-c-doc","fixed_in":["0.13.1-2.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libfastjson","fixed_in":["0.99.9-5.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libfastjson-devel","fixed_in":["0.99.9-5.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libfastjson","fixed_in":["0.99.9-2.el8"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"json-c","fixed_in":["0.15-2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"libfastjson","fixed_in":["0.99.9-1.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"libfastjson-devel","fixed_in":["0.99.9-1.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libfastjson","fixed_in":["0.99.9-3.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libfastjson-devel","fixed_in":["0.99.9-3.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libfastjson-dev","fixed_in":["0.99.8-2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libfastjson4","fixed_in":["0.99.8-2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"json-c","fixed_in":["0.13.1+dfsg-8"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"json-c","fixed_in":["0.13.1+dfsg-8"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"json-c","fixed_in":["0.13.1+dfsg-8"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libfastjson","fixed_in":["1.2304.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libfastjson","fixed_in":["1.2304.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libfastjson","fixed_in":["1.2304.0-1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"json-c","fixed_in":["0.11-4+deb8u1","0.11-4+deb8u2"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"json-c","fixed_in":["0.12.1-1.1+deb9u1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"libfastjson","fixed_in":["0.99.8-2+deb10u1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"libfastjson","fixed_in":["0.99.9-1+deb11u1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"json-c","fixed_in":["0.12.1+ds-2+deb10u1"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"json-c","fixed_in":["0.13.1-2.2.mga7"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"libfastjson","fixed_in":["1.2304.0-1.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"libfastjson","fixed_in":["0.99.9-3.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"libfastjson","fixed_in":["0.99.9-3.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"libfastjson","fixed_in":["0.99.9-3.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"libfastjson","fixed_in":["0.99.9-3.oe2203sp1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"json-c-debuginfo","fixed_in":["0:0.13.1-2.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"json-c-debugsource","fixed_in":["0:0.13.1-2.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"json-c-devel","fixed_in":["0:0.13.1-2.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"json-c","fixed_in":["0:0.13.1-2.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"json-c-debuginfo","fixed_in":["0:0.13.1-2.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"json-c-debugsource","fixed_in":["0:0.13.1-2.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"json-c-doc","fixed_in":["0:0.13.1-2.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libfastjson","fixed_in":["0:0.99.9-5.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libfastjson-debuginfo","fixed_in":["0:0.99.9-5.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libfastjson-debugsource","fixed_in":["0:0.99.9-5.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libfastjson-debuginfo","fixed_in":["0:0.99.9-5.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libfastjson-debugsource","fixed_in":["0:0.99.9-5.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libfastjson-devel","fixed_in":["0:0.99.9-5.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libfastjson","fixed_in":["0:0.99.9-2.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libfastjson-debuginfo","fixed_in":["0:0.99.9-2.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libfastjson-debugsource","fixed_in":["0:0.99.9-2.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libfastjson","fixed_in":["0:0.99.9-1.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libfastjson-debuginfo","fixed_in":["0:0.99.9-1.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libfastjson-debugsource","fixed_in":["0:0.99.9-1.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libfastjson","fixed_in":["0:0.99.9-1.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libfastjson-debuginfo","fixed_in":["0:0.99.9-1.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libfastjson-debugsource","fixed_in":["0:0.99.9-1.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libfastjson","fixed_in":["0:0.99.9-3.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libfastjson-debuginfo","fixed_in":["0:0.99.9-3.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libfastjson-debugsource","fixed_in":["0:0.99.9-3.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"libfastjson","fixed_in":["0:0.99.9-3.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"libfastjson-debuginfo","fixed_in":["0:0.99.9-3.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"libfastjson-debugsource","fixed_in":["0:0.99.9-3.el9_0.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"json-c","fixed_in":["0:0.13.1-2.el8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"libfastjson","fixed_in":["0:0.99.9-5.el9"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"libfastjson","fixed_in":["0:0.99.9-2.el8"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"json-c","fixed_in":["0.13-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"json-c","fixed_in":["0.13-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"json-c","fixed_in":["0.13-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"json-c","fixed_in":["0.13-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"json-c","fixed_in":["0.13-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"json-c","fixed_in":["0.13-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"json-c","fixed_in":["0.13-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"json-c","fixed_in":["0.13-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"json-c","fixed_in":["0.13-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"json-c","fixed_in":["0.13-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"json-c","fixed_in":["0.13-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"json-c","fixed_in":["0.13-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"json-c","fixed_in":["0.13-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"json-c","fixed_in":["0.13-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"json-c","fixed_in":["0.13-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.1","package":"json-c","fixed_in":["0.13-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"json-c","fixed_in":["0.13-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.1","package":"json-c","fixed_in":["0.13-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"json-c","fixed_in":["0.13-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"json-c","fixed_in":["0.13-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"json-c","fixed_in":["0.13-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"json-c","fixed_in":["0.13-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"json-c","fixed_in":["0.13-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"json-c","fixed_in":["0.12.1-4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"json-c","fixed_in":["0.12.1-4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"json-c","fixed_in":["0.12.1-4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"json-c","fixed_in":["0.12.1-4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"json-c","fixed_in":["0.12.1-4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"json-c","fixed_in":["0.12.1-4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"json-c","fixed_in":["0.12.1-4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"json-c","fixed_in":["0.12.1-4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"json-c","fixed_in":["0.12.1-4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"libfastjson","fixed_in":["0.99.9-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"libfastjson","fixed_in":["0.99.9-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"libfastjson","fixed_in":["0.99.8-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libfastjson","fixed_in":["0.99.8-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"libfastjson","fixed_in":["0.99.8-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libfastjson","fixed_in":["0.99.8-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"libfastjson","fixed_in":["0.99.8-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libfastjson","fixed_in":["0.99.8-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"libfastjson","fixed_in":["0.99.8-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libfastjson","fixed_in":["0.99.8-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libfastjson","fixed_in":["0.99.8-3.6.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"json-c","fixed_in":["0.11-3ubuntu1.2+esm3","0.11-3ubuntu1.2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"json-c","fixed_in":["0.11-4ubuntu2.6","0.11-4ubuntu2.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"json-c","fixed_in":["0.12.1-1.3ubuntu0.3","0.12.1-1.3ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"json-c","fixed_in":["0.13.1+dfsg-7ubuntu0.3","0.13.1+dfsg-7ubuntu0.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"json-c","fixed_in":["0.13-3.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.1-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.1-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.1-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2304.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2304.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2304.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2304.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2304.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2304.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2304.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2304.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2304.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2304.0-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"json-c-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.1-2.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"json-c-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.1-2.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.9-5.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libfastjson-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.9-5.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.9-2.el8"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15-2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.9-1.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"libfastjson-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.9-1.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.9-3.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libfastjson-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.9-3.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libfastjson-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.8-2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libfastjson4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.8-2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.1+dfsg-8"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.1+dfsg-8"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.1+dfsg-8"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2304.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2304.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2304.0-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11-4+deb8u1"}]}],"versions":["0.11-4"]},{"source":"osv","ecosystem":"Debian:8","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11-4+deb8u2"}]}],"versions":["0.11-4","0.11-4+deb8u1"]},{"source":"osv","ecosystem":"Debian:9","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.1-1.1+deb9u1"}]}],"versions":["0.12.1-1.1"]},{"source":"osv","ecosystem":"Debian:10","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.8-2+deb10u1"}]}],"versions":["0.99.8-2"]},{"source":"osv","ecosystem":"Debian:11","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.9-1+deb11u1"}]}],"versions":["0.99.9-1"]},{"source":"osv","ecosystem":"Debian:10","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.1+ds-2+deb10u1"}]}],"versions":["0.12.1+ds-2"]},{"source":"osv","ecosystem":"Mageia:7","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.1-2.2.mga7"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2304.0-1.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.9-3.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.9-3.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.9-3.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.9-3.oe2203sp1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"json-c-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.1-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"json-c-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.1-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"json-c-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.1-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.1-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"json-c-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.1-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"json-c-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.1-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"json-c-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.1-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.99.9-5.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libfastjson-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.99.9-5.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libfastjson-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.99.9-5.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libfastjson-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.99.9-5.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libfastjson-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.99.9-5.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libfastjson-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.99.9-5.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.99.9-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libfastjson-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.99.9-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libfastjson-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.99.9-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.99.9-1.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libfastjson-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.99.9-1.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libfastjson-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.99.9-1.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.99.9-1.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libfastjson-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.99.9-1.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libfastjson-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.99.9-1.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.99.9-3.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libfastjson-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.99.9-3.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libfastjson-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.99.9-3.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.99.9-3.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"libfastjson-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.99.9-3.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"libfastjson-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.99.9-3.el9_0.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.1-2.el8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.99.9-5.el9"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.99.9-2.el8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.1-4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.1-4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.1-4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.1-4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.1-4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.1-4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.1-4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.1-4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.1-4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.9-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.9-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.8-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.8-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.8-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.8-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.8-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.8-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.8-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.8-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libfastjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.8-3.6.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11-3ubuntu1.2+esm3"}]}],"versions":["0.11-2ubuntu1","0.11-3ubuntu1","0.11-3ubuntu1.2","0.11-3ubuntu1.2+esm1","0.11-3ubuntu1.2+esm2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11-4ubuntu2.6"}]}],"versions":["0.11-4ubuntu2","0.11-4ubuntu2.1","0.11-4ubuntu2.2","0.11-4ubuntu2.5"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.1-1.3ubuntu0.3"}]}],"versions":["0.12.1-1.2","0.12.1-1.3","0.12.1-1.3ubuntu0.1","0.12.1-1.3ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.1+dfsg-7ubuntu0.3"}]}],"versions":["0.13.1+dfsg-4","0.13.1+dfsg-6","0.13.1+dfsg-7","0.13.1+dfsg-7ubuntu0.1","0.13.1+dfsg-7ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11-3ubuntu1.2+esm1"}]}],"versions":["0.11-2ubuntu1","0.11-3ubuntu1","0.11-3ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11-4ubuntu2.1"}]}],"versions":["0.11-4ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.1-1.3ubuntu0.1"}]}],"versions":["0.12.1-1.2","0.12.1-1.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.1+dfsg-7ubuntu0.1"}]}],"versions":["0.13.1+dfsg-4","0.13.1+dfsg-6","0.13.1+dfsg-7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11-3ubuntu1.2+esm3"}]}],"versions":["0.11-2ubuntu1","0.11-3ubuntu1","0.11-3ubuntu1.2","0.11-3ubuntu1.2+esm1","0.11-3ubuntu1.2+esm2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11-4ubuntu2.6"}]}],"versions":["0.11-4ubuntu2","0.11-4ubuntu2.1","0.11-4ubuntu2.2","0.11-4ubuntu2.5"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.1-1.3ubuntu0.3"}]}],"versions":["0.12.1-1.2","0.12.1-1.3","0.12.1-1.3ubuntu0.1","0.12.1-1.3ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.1+dfsg-7ubuntu0.3"}]}],"versions":["0.13.1+dfsg-4","0.13.1+dfsg-6","0.13.1+dfsg-7","0.13.1+dfsg-7ubuntu0.1","0.13.1+dfsg-7ubuntu0.2"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"json-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13-3.3.1"}]}]}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"json-c","product":"json-c"},{"vendor":"siemens","product":"ruggedcom rox mx5000"},{"vendor":"siemens","product":"ruggedcom rox mx5000re"},{"vendor":"siemens","product":"ruggedcom rox rx1400"},{"vendor":"siemens","product":"ruggedcom rox rx1500"},{"vendor":"siemens","product":"ruggedcom rox rx1501"},{"vendor":"siemens","product":"ruggedcom rox rx1510"},{"vendor":"siemens","product":"ruggedcom rox rx1511"},{"vendor":"siemens","product":"ruggedcom rox rx1512"},{"vendor":"siemens","product":"ruggedcom rox rx1524"},{"vendor":"siemens","product":"ruggedcom rox rx1536"},{"vendor":"siemens","product":"ruggedcom rox rx5000"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 tm mfp - gnu/linux subsystem"},{"vendor":"siemens","product":"sinec_ins"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"}],"references":[{"url":"https://github.com/json-c/json-c/pull/592","tags":["x_transferred","Exploit","Patch","Third Party Advisory","fix","report"]},{"url":"https://github.com/rsyslog/libfastjson/issues/161","tags":["x_transferred","Exploit","Third Party Advisory","evidence"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CQQRRGBQCAWNCCJ2HN3W5SSCZ4QGMXQI/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://usn.ubuntu.com/4360-1/","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CBR36IXYBHITAZFB5PFBJTED22WO5ONB/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W226TSCJBEOXDUFVKNWNH7ETG7AR6MCS/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/05/msg00032.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/05/msg00034.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/4360-4/","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202006-13","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/07/msg00031.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2020/dsa-4741","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20210521-0001/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/06/msg00023.html","tags":["mailing-list","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/07/msg00021.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-637483.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-202008.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-12762","tags":["web","advisory"]},{"url":"https://usn.ubuntu.com/4360-4"},{"url":"https://usn.ubuntu.com/4360-1"},{"url":"https://security.netapp.com/advisory/ntap-20210521-0001"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W226TSCJBEOXDUFVKNWNH7ETG7AR6MCS"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CQQRRGBQCAWNCCJ2HN3W5SSCZ4QGMXQI"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CBR36IXYBHITAZFB5PFBJTED22WO5ONB"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W226TSCJBEOXDUFVKNWNH7ETG7AR6MCS"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CQQRRGBQCAWNCCJ2HN3W5SSCZ4QGMXQI"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CBR36IXYBHITAZFB5PFBJTED22WO5ONB"},{"url":"https://github.com/advisories/GHSA-3797-gmjf-45gm","tags":["advisory"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-12762","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2020-12762","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6431","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-12762","tags":["report"]},{"url":"https://bugzilla.redhat.com/1835253","tags":["report"]},{"url":"https://bugzilla.redhat.com/2227786","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-6431.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6976","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-6976.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2020-12762","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2025-1751141300.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1751892313.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1791551522.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-12762","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0240.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=26623","tags":["report"]},{"url":"https://advisories.mageia.org/MGASA-2023-0159.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31812","tags":["report"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1186","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:4382","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.5_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1835253","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4382.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-12762","tags":["advisory","report"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.3_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2227786","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6431.json","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.9_release_notes/index","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6976.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0411","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0411.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0573","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0573.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1086","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1086.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1154","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1154.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2021:4382","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:6431","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:6976","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220184-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1171479","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12762","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220184-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223001-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232135-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241775-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241846-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-12762","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4360-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4360-4","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LS5Y2M6XDX2JOBPPLIMAXXAXRPAU65ND/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2020-12762","description":"json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.","status":"published","published":"2020-05-09T00:00:00Z","modified":"2026-10-14T09:06:59.467Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:35:52.925152Z"}],"euvd":[{"id":"EUVD-2020-5047","description":"json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.","status":"published","published":"2020-05-09T00:00:00Z","modified":"2026-10-14T09:06:59Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T17:27:17.374818Z"}],"ghsa":[{"id":"GHSA-3797-gmjf-45gm","title":"json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as...","description":"json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.","status":"published","published":"2022-05-24T17:17:32Z","modified":"2026-10-14T12:31:14Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-190","CWE-787"],"updated_at":"2026-11-02T15:13:24.188405Z"}],"nvd":[{"id":"CVE-2020-12762","description":"json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.","status":"published","published":"2020-05-09T18:15:11.283Z","modified":"2026-10-14T10:17:26.413Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-190","CWE-787"],"updated_at":"2026-11-02T14:06:00.784809Z"}],"osv":[{"id":"ALPINE-CVE-2020-12762","description":"json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.","status":"published","published":"2020-05-09T18:15:11.283Z","modified":"2026-10-26T11:17:55.110784019Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:48.11886Z"},{"id":"AZL-6506","title":"CVE-2020-12762 affecting package json-c for versions less than 0.15-2","description":"json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.","status":"published","published":"2020-05-09T18:15:11Z","modified":"2026-04-21T04:32:39.580328Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:08.076947Z"},{"id":"BELL-CVE-2020-12762","title":"CVE-2020-12762 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:17.378376Z","modified":"2026-01-26T09:49:47.967124Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:15.340685Z"},{"id":"CVE-2020-12762","description":"json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.","status":"published","published":"2020-05-09T18:15:11.283Z","modified":"2026-10-20T10:51:34.564160139Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:14.034736Z"},{"id":"DEBIAN-CVE-2020-12762","description":"json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.","status":"published","published":"2020-05-09T18:15:11.283Z","modified":"2026-10-26T12:01:34.545925438Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:32.862554Z"},{"id":"OESA-2023-1186","title":"libfastjson security update","description":"libfastjson is a fork from json-c, and is currently under development. The aim of this is not to provide a slightly modified clone of json-c. It\u0026apos;s aim is to provide: a small library with essential json handling functions, sufficiently good json support (not 100% standards compliant), be very fast in processing.\r\n\r\nSecurity Fix(es):\r\n\r\njson-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.(CVE-2020-12762)","status":"published","published":"2023-03-31T11:05:39Z","modified":"2026-08-18T01:17:38.711381493Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"RHSA-2021:4382","title":"Red Hat Security Advisory: json-c security and bug fix update","status":"published","published":"2024-09-16T05:48:19Z","modified":"2026-06-27T10:14:28Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2023:6431","title":"Red Hat Security Advisory: libfastjson security update","status":"published","published":"2024-09-16T05:48:26Z","modified":"2026-06-27T10:18:27Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:6976","title":"Red Hat Security Advisory: libfastjson security update","status":"published","published":"2024-09-16T05:48:35Z","modified":"2026-06-27T10:18:43Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2024:0411","title":"Red Hat Security Advisory: libfastjson security update","status":"published","published":"2024-09-16T05:48:44Z","modified":"2026-06-27T10:18:57Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:0573","title":"Red Hat Security Advisory: libfastjson security update","status":"published","published":"2024-09-16T05:48:54Z","modified":"2026-06-27T10:19:05Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:1086","title":"Red Hat Security Advisory: libfastjson security update","status":"published","published":"2024-09-16T05:49:03Z","modified":"2026-06-27T10:19:13Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:1154","title":"Red Hat Security Advisory: libfastjson security update","status":"published","published":"2024-09-16T05:49:12Z","modified":"2026-06-27T10:19:16Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RLSA-2021:4382","title":"Moderate: json-c security and bug fix update","description":"JSON-C implements a reference counting object model that allows users to easily construct JavaScript Object Notation (JSON) objects in C, output them as JSON formatted strings, and parse JSON formatted strings back into the C representation of JSON objects.\n\nSecurity Fix(es):\n\n* json-c: integer overflow and out-of-bounds write via a large JSON file (CVE-2020-12762)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.5 Release Notes linked from the References section.","status":"published","published":"2021-11-09T13:10:09Z","modified":"2026-02-05T00:30:15.545025Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"RLSA-2023:6431","title":"Moderate: libfastjson security update","description":"The libfastjson library provides essential JavaScript Object Notation (JSON) handling functions. The library enables users to construct JSON objects in C, output them as JSON-formatted strings, and convert JSON-formatted strings back to the C representation of JSON objects.\n\nSecurity Fix(es):\n\n* json-c, libfastjson: integer overflow and out-of-bounds write via a large JSON file (CVE-2020-12762)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.3 Release Notes linked from the References section.","status":"published","published":"2026-06-25T12:03:37.665962Z","modified":"2026-06-25T12:30:05.608059346Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"RLSA-2023:6976","title":"Moderate: libfastjson security update","description":"The libfastjson library provides essential JavaScript Object Notation (JSON) handling functions. The library enables users to construct JSON objects in C, output them as JSON-formatted strings, and convert JSON-formatted strings back to the C representation of JSON objects.\n\nSecurity Fix(es):\n\n* json-c, libfastjson: integer overflow and out-of-bounds write via a large JSON file (CVE-2020-12762)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.9 Release Notes linked from the References section.","status":"published","published":"2026-06-27T00:01:04.193077Z","modified":"2026-06-27T00:30:03.998862732Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"UBUNTU-CVE-2020-12762","description":"json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.","status":"published","published":"2020-05-09T18:15:00Z","modified":"2026-04-22T12:28:36.683773Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:22.804634Z"},{"id":"ALSA-2021:4382","title":"Moderate: json-c security and bug fix update","description":"JSON-C implements a reference counting object model that allows users to easily construct JavaScript Object Notation (JSON) objects in C, output them as JSON formatted strings, and parse JSON formatted strings back into the C representation of JSON objects.\n\nSecurity Fix(es):\n\n* json-c: integer overflow and out-of-bounds write via a large JSON file (CVE-2020-12762)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2021-11-09T13:10:09Z","modified":"2026-10-29T11:01:28.48572299Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"ALSA-2023:6431","title":"Moderate: libfastjson security update","description":"The libfastjson library provides essential JavaScript Object Notation (JSON) handling functions. The library enables users to construct JSON objects in C, output them as JSON-formatted strings, and convert JSON-formatted strings back to the C representation of JSON objects.\n\nSecurity Fix(es):\n\n* json-c, libfastjson: integer overflow and out-of-bounds write via a large JSON file (CVE-2020-12762)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-11-07T00:00:00Z","modified":"2026-11-05T19:45:02.309722013Z","updated_at":"2026-11-05T19:59:24.31291Z"},{"id":"ALSA-2023:6976","title":"Moderate: libfastjson security update","description":"The libfastjson library provides essential JavaScript Object Notation (JSON) handling functions. The library enables users to construct JSON objects in C, output them as JSON-formatted strings, and convert JSON-formatted strings back to the C representation of JSON objects.\n\nSecurity Fix(es):\n\n* json-c, libfastjson: integer overflow and out-of-bounds write via a large JSON file (CVE-2020-12762)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-11-14T00:00:00Z","modified":"2026-10-29T11:02:19.320595248Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"CLSA-2025-1751141300","title":"libfastjson: Fix of CVE-2020-12762","description":"- CVE-2020-12762: fix out of bounds write vulnerability in printbuf","status":"published","published":"2025-06-28T20:08:25Z","modified":"2026-06-01T00:33:13.347205997Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1751892313","title":"libfastjson: Fix of CVE-2020-12762","description":"- CVE-2020-12762: fix out of bounds write vulnerability in printbuf","status":"published","published":"2025-07-07T12:45:17Z","modified":"2026-06-01T00:31:07.501078598Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2026-1791551522","title":"Fix CVE(s): CVE-2020-12762","description":"   * SECURITY UPDATE: integer overflow and out-of-bounds write in printbuf\n     - debian/patches/CVE-2020-12762.patch: reject sizes that overflow int in\n       printbuf_extend(), printbuf_memappend() and printbuf_memset()\n       (printbuf.c)\n     - CVE-2020-12762","status":"published","published":"2026-10-09T13:12:12Z","modified":"2026-10-26T09:32:04.3743961Z","updated_at":"2026-11-02T15:43:50.599064Z"},{"id":"DLA-2228-1","title":"json-c - security update","status":"published","published":"2020-05-31T00:00:00Z","modified":"2026-03-09T01:21:23.143473Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DLA-2228-2","title":"json-c - regression update","status":"published","published":"2020-05-31T00:00:00Z","modified":"2026-03-09T01:19:23.939135Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DLA-2301-1","title":"json-c - security update","status":"published","published":"2020-07-30T00:00:00Z","modified":"2026-03-09T01:20:50.61275Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DLA-3461-1","title":"libfastjson - security update","status":"published","published":"2023-06-20T00:00:00Z","modified":"2026-03-09T01:20:28.413614Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DLA-4258-1","title":"libfastjson - security update","status":"published","published":"2025-07-28T00:00:00Z","modified":"2026-03-09T02:11:39.856528Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"DSA-4741-1","title":"json-c - security update","status":"published","published":"2020-08-05T00:00:00Z","modified":"2026-03-09T02:11:07.542849Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"MGASA-2020-0240","title":"Updated json-c packages fix security vulnerability","description":"Updated json-c package fixes security vulnerabilities:\n\nIt was discovered that json-c through 0.14 has an integer overflow\nand out-of-bounds write via a large JSON file, as demonstrated by\nprintbuf_memappend (CVE-2020-12762).\n","status":"published","published":"2020-05-29T21:18:57Z","modified":"2026-04-16T04:43:12.017917725Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"MGASA-2023-0159","title":"Updated libfastjson packages fix security vulnerability","description":"Integer overflow and out-of-bounds write via a large JSON file, as\ndemonstrated by printbuf_memappend. (CVE-2020-12762)\n","status":"published","published":"2023-05-06T18:19:07Z","modified":"2026-04-16T04:44:41.187845025Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2022:0184-1","title":"Security update for json-c","description":"This update for json-c fixes the following issues:\n\n- CVE-2020-12762: Fixed integer overflow and out-of-bounds write. (bsc#1171479)\n","status":"published","published":"2022-01-25T17:21:12Z","modified":"2026-02-04T03:09:25.515127Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2024:12911-1","title":"libfastjson-devel-1.2304.0-1.1 on GA media","description":"These are all security issues fixed in the libfastjson-devel-1.2304.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:21:28.056132Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"SUSE-SU-2022:0184-1","title":"Security update for json-c","description":"This update for json-c fixes the following issues:\n\n- CVE-2020-12762: Fixed integer overflow and out-of-bounds write. (bsc#1171479)\n","status":"published","published":"2022-01-25T17:22:12Z","modified":"2026-02-04T03:08:48.15526Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:0184-2","title":"Security update for json-c","description":"This update for json-c fixes the following issues:\n\n- CVE-2020-12762: Fixed integer overflow and out-of-bounds write. (bsc#1171479)\n","status":"published","published":"2022-02-17T07:37:14Z","modified":"2026-02-04T03:47:18.651599Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:3001-1","title":"Security update for json-c","description":"This update for json-c fixes the following issues:\n\n- CVE-2020-12762: Fixed an integer overflow that could lead to memory\n  corruption via a large JSON file (bsc#1171479).\n\nNon-security fixes:\n\n- Updated to version 0.12.1 (jsc#PED-1778).\n","status":"published","published":"2022-09-02T11:29:32Z","modified":"2026-02-04T03:12:40.573468Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2023:2135-1","title":"Security update for libfastjson","description":"This update for libfastjson fixes the following issues:\n\n- CVE-2020-12762: Fixed an integer overflow and out-of-bounds write via a large JSON file (bsc#1171479).\n","status":"published","published":"2023-05-09T11:38:16Z","modified":"2026-02-04T03:38:34.19249Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"SUSE-SU-2024:1775-1","title":"Security update for libfastjson","description":"This update for libfastjson fixes the following issues:\n\n- CVE-2020-12762: Fixed integer overflow and out-of-bounds write via a large JSON file (bsc#1171479).\n","status":"published","published":"2024-05-24T13:21:13Z","modified":"2026-02-04T04:17:01.709299Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:1846-1","title":"Security update for libfastjson","description":"This update for libfastjson fixes the following issues:\n\n- CVE-2020-12762: Fixed integer overflow and out-of-bounds write via a large JSON file (bsc#1171479).\n","status":"published","published":"2024-05-29T19:41:22Z","modified":"2026-02-04T03:51:16.207508Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"USN-4360-1","title":"json-c vulnerability","description":"It was discovered that json-c incorrectly handled certain JSON files.\nAn attacker could possibly use this issue to execute arbitrary code.\n","status":"published","published":"2020-05-14T18:06:02Z","modified":"2026-06-29T13:47:58.189030139Z","updated_at":"2026-11-02T16:58:14.547547Z"},{"id":"USN-4360-4","title":"json-c vulnerability","description":"USN-4360-1 fixed a vulnerability in json-c. The security fix introduced a\nmemory leak that was reverted in USN-4360-2 and USN-4360-3. This update provides\nthe correct fix update for CVE-2020-12762.\n\nOriginal advisory details:\n\n It was discovered that json-c incorrectly handled certain JSON files.\n An attacker could possibly use this issue to execute arbitrary code.\n","status":"published","published":"2020-05-28T11:33:22Z","modified":"2026-06-29T13:47:58.422789542Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}