{"id":"CVE-2024-31755","aliases":["AZL-40184","AZL-67458","BELL-CVE-2024-31755","DEBIAN-CVE-2024-31755","EUVD-2024-29628","GHSA-5g69-hr8r-x577","MGASA-2024-0324","RHSA-2025:9022","RHSA-2025:9203","RHSA-2025:9838","UBUNTU-CVE-2024-31755","USN-6784-1","openSUSE-SU-2024:0139-1","openSUSE-SU-2024:14021-1"],"status":"published","title":"cJSON v1.7.17 was discovered to contain a segmentation violation, which can trigger through the...","description":"cJSON v1.7.17 was discovered to contain a segmentation violation, which can trigger through the second parameter of function cJSON_SetValuestring at cJSON.c.","severity":{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.00648,"percentile":0.51534,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2024-04-26T00:00:00Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Azure Linux:2","package":"apparmor","fixed_in":["3.0.4-4"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"apparmor","fixed_in":["3.1.7-1"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"cjson","fixed_in":["1.7.18-r1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"cjson","fixed_in":["1.7.15-1+deb12u2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"cjson","fixed_in":["1.7.18-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"cjson","fixed_in":["1.7.18-1"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"cjson","fixed_in":["1.7.15-2.2.mga9"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"cjson","fixed_in":["0:1.7.18-1.el9sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"cjson-debuginfo","fixed_in":["0:1.7.18-1.el9sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"cjson-debugsource","fixed_in":["0:1.7.18-1.el9sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.17::el9","package":"cjson","fixed_in":["0:1.7.18-1.el9sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.17::el9","package":"cjson-debuginfo","fixed_in":["0:1.7.18-1.el9sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.17::el9","package":"cjson-debugsource","fixed_in":["0:1.7.18-1.el9sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"cjson","fixed_in":["0:1.7.18-1.el8sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"cjson-debuginfo","fixed_in":["0:1.7.18-1.el8sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"cjson-debugsource","fixed_in":["0:1.7.18-1.el8sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.16::el8","package":"cjson","fixed_in":["0:1.7.18-1.el8sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.16::el8","package":"cjson-debuginfo","fixed_in":["0:1.7.18-1.el8sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.16::el8","package":"cjson-debugsource","fixed_in":["0:1.7.18-1.el8sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"cjson","fixed_in":["0:1.7.18-1.el9sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"cjson-debuginfo","fixed_in":["0:1.7.18-1.el9sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"cjson-debugsource","fixed_in":["0:1.7.18-1.el9sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.16::el9","package":"cjson","fixed_in":["0:1.7.18-1.el9sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.16::el9","package":"cjson-debuginfo","fixed_in":["0:1.7.18-1.el9sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.16::el9","package":"cjson-debugsource","fixed_in":["0:1.7.18-1.el9sat"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"cjson","fixed_in":["1.7.15-1ubuntu0.1~esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:24.04:LTS","package":"cjson","fixed_in":["1.7.17-1ubuntu0.1~esm2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"cJSON","fixed_in":["1.7.18-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"apparmor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-4"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"apparmor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.7-1"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.15-r2"},{"fixed":"1.7.18-r1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.15-1+deb12u2"}]}],"versions":["1.7.15-1","1.7.15-1+deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.18-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.18-1"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.15-2.2.mga9"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.18-1.el9sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"cjson-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.18-1.el9sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"cjson-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.18-1.el9sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.18-1.el9sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"cjson-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.18-1.el9sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"cjson-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.18-1.el9sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.18-1.el8sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"cjson-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.18-1.el8sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"cjson-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.18-1.el8sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.18-1.el8sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"cjson-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.18-1.el8sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"cjson-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.18-1.el8sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.18-1.el9sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"cjson-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.18-1.el9sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"cjson-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.18-1.el9sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.18-1.el9sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"cjson-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.18-1.el9sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"cjson-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.18-1.el9sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.18-1.el8sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"cjson-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.18-1.el8sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"cjson-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.18-1.el8sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.18-1.el8sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"cjson-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.18-1.el8sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"cjson-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.18-1.el8sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python-sqlparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-1.el8pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python3.11-sqlparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-1.el8pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python-sqlparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-1.el8pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python3.11-sqlparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-1.el8pc"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"rubygem-rack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.14-1.el8sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"rubygem-rack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.14-1.el8sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.15-1ubuntu0.1~esm2"}]}],"versions":["1.7.14-1","1.7.15-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.17-1ubuntu0.1~esm2"}]}],"versions":["1.7.16-1","1.7.16-2","1.7.17-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.15-1ubuntu0.1~esm2"}]}],"versions":["1.7.14-1","1.7.15-1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.17-1ubuntu0.1~esm2"}]}],"versions":["1.7.16-1","1.7.16-2","1.7.17-1"],"bundled":3},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP5","package":"cJSON","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.18-bp155.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"cJSON","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.18-bp155.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"cJSON","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.18-1.1"}]}]}],"products":[{"vendor":"cjson_project","product":"cjson"}],"references":[{"url":"https://github.com/DaveGamble/cJSON/issues/839","tags":["x_transferred","Exploit","Issue Tracking","Vendor Advisory","report","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-31755","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-5g69-hr8r-x577","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2024-31755","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/31xxx/CVE-2024-31755.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-31755","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0324.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33600","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6B5ZS2THGMPX2CG2C7OVYS5F7REKYJYJ/","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2025:9022","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2277268","tags":["report"]},{"url":"https://issues.redhat.com/browse/SAT-34204","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-34205","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-34206","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-34207","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-34208","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-34209","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-34210","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-34211","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-34214","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-34800","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9022.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-31755","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-31755","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2025:9203","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_satellite/6.16/html/updating_red_hat_satellite/index","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-34932","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9203.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:9838","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_satellite/6.15/html/updating_red_hat_satellite/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254641","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254643","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2278038","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2364966","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9838.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-50471","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-50471","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-50471","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-50472","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-50472","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-50472","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-4340","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-4340","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-4340","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-2m57-hf25-phgg","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-46727","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-46727","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-46727","tags":["advisory"]},{"url":"https://github.com/rack/rack/commit/2bb5263b464b65ba4b648996a579dbd180d2b712","tags":["article"]},{"url":"https://github.com/rack/rack/commit/3f5a4249118d09d199fe480466c8c6717e43b6e3","tags":["article"]},{"url":"https://github.com/rack/rack/commit/cd6b70a1f2a1016b73dc906f924869f4902c2d74","tags":["article"]},{"url":"https://github.com/rack/rack/security/advisories/GHSA-gjh7-p2fx-99vx","tags":["article"]},{"url":"https://ubuntu.com/security/CVE-2024-31755","tags":["report"]},{"url":"https://github.com/DaveGamble/cJSON/pull/840","tags":["report"]},{"url":"https://github.com/DaveGamble/cJSON/commit/7e4d5dabe7a9b754c601f214e65b544e67ba9f59","tags":["report"]},{"url":"https://github.com/DaveGamble/cJSON/pull/849/commits/18d1749e26eb1abe803bf49f383e72faec02da93","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6784-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-50471","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-50472","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/36QNMKFWNRJX3XHLNGZ3DNLMLIHSRF4U/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1218098","tags":["report"]},{"url":"https://bugzilla.suse.com/1218099","tags":["report"]},{"url":"https://bugzilla.suse.com/1223420","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-50471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-50472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-31755","tags":["web"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-31755","description":"cJSON v1.7.17 was discovered to contain a segmentation violation, which can trigger through the second parameter of function cJSON_SetValuestring at cJSON.c.","status":"published","published":"2024-04-26T00:00:00Z","modified":"2024-08-02T01:59:49.417Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:34:14.308905Z"}],"euvd":[{"id":"EUVD-2024-29628","description":"cJSON v1.7.17 was discovered to contain a segmentation violation, which can trigger through the second parameter of function cJSON_SetValuestring at cJSON.c.","status":"published","published":"2024-04-26T00:00:00Z","modified":"2024-08-02T01:59:49Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-03T03:50:24.06764Z"}],"ghsa":[{"id":"GHSA-5g69-hr8r-x577","title":"cJSON v1.7.17 was discovered to contain a segmentation violation, which can trigger through the...","description":"cJSON v1.7.17 was discovered to contain a segmentation violation, which can trigger through the second parameter of function cJSON_SetValuestring at cJSON.c.","status":"published","published":"2024-04-26T03:30:29Z","modified":"2024-07-03T18:36:55Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:57:34.925398Z"}],"nvd":[{"id":"CVE-2024-31755","description":"cJSON v1.7.17 was discovered to contain a segmentation violation, which can trigger through the second parameter of function cJSON_SetValuestring at cJSON.c.","status":"published","published":"2024-04-26T03:15:06.69Z","modified":"2026-06-17T07:28:42.587Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:09:53.50104Z"}],"osv":[{"id":"BELL-CVE-2024-31755","status":"published","published":"2024-05-01T05:57:33.381677Z","modified":"2026-07-30T07:15:07.234141998Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:19.66992Z"},{"id":"CVE-2024-31755","description":"cJSON v1.7.17 was discovered to contain a segmentation violation, which can trigger through the second parameter of function cJSON_SetValuestring at cJSON.c.","status":"published","published":"2024-04-26T00:00:00Z","modified":"2026-10-28T02:30:53.417363089Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:40.06138Z"},{"id":"DEBIAN-CVE-2024-31755","description":"cJSON v1.7.17 was discovered to contain a segmentation violation, which can trigger through the second parameter of function cJSON_SetValuestring at cJSON.c.","status":"published","published":"2024-04-26T03:15:06.69Z","modified":"2026-11-02T12:02:18.32226888Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:42.530184Z"},{"id":"RHSA-2025:9022","title":"Red Hat Security Advisory: Satellite 6.17.1 Async Update","status":"published","published":"2025-06-13T10:03:52Z","modified":"2026-06-26T11:32:41Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"RHSA-2025:9203","title":"Red Hat Security Advisory: Satellite 6.16.5.2 Async Update","status":"published","published":"2025-06-18T10:05:10Z","modified":"2026-06-26T11:32:50Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"RHSA-2025:9838","title":"Red Hat Security Advisory: Satellite 6.15.5.3 Async Update","status":"published","published":"2025-06-27T10:05:49Z","modified":"2026-10-17T10:08:17Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"UBUNTU-CVE-2024-31755","description":"cJSON v1.7.17 was discovered to contain a segmentation violation, which can trigger through the second parameter of function cJSON_SetValuestring at cJSON.c.","status":"published","published":"2024-04-26T03:15:00Z","modified":"2026-04-22T14:48:52.406297Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:48.333535Z"},{"id":"AZL-40184","title":"CVE-2024-31755 affecting package apparmor for versions less than 3.0.4-4","description":"cJSON v1.7.17 was discovered to contain a segmentation violation, which can trigger through the second parameter of function cJSON_SetValuestring at cJSON.c.","status":"published","published":"2024-04-26T03:15:06Z","modified":"2026-04-21T04:28:57.181945Z","updated_at":"2026-11-02T15:28:04.608733Z"},{"id":"AZL-67458","title":"CVE-2024-31755 affecting package apparmor for versions less than 3.1.7-1","description":"cJSON v1.7.17 was discovered to contain a segmentation violation, which can trigger through the second parameter of function cJSON_SetValuestring at cJSON.c.","status":"published","published":"2024-04-26T03:15:06Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:23.994498Z"},{"id":"MGASA-2024-0324","title":"Updated cjson packages fix security vulnerability","description":"cJSON was discovered to contain a segmentation violation, which can\ntrigger through the second parameter of function cJSON_SetValuestring at\ncJSON.c. (CVE-2024-31755)\n","status":"published","published":"2024-10-04T05:27:04Z","modified":"2026-04-16T04:42:28.570615181Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:0139-1","title":"Security update for cJSON","description":"This update for cJSON fixes the following issues:\n\n- Update to 1.7.18:\n  * CVE-2024-31755: NULL pointer dereference via cJSON_SetValuestring() (boo#1223420)\n  * Remove non-functional list handling of compiler flags\n  * Fix heap buffer overflow\n  * remove misused optimization flag -01\n  * Set free'd pointers to NULL whenever they are not reassigned\n    immediately after\n\n- Update to version 1.7.17 (boo#1218098, CVE-2023-50472,\n    boo#1218099, CVE-2023-50471):\n  * Fix null reference in cJSON_SetValuestring (CVE-2023-50472).\n  * Fix null reference in cJSON_InsertItemInArray (CVE-2023-50471).\n\n- Update to 1.7.16:\n  * Add an option for ENABLE_CJSON_VERSION_SO in CMakeLists.txt\n  * Add cmake_policy to CMakeLists.txt\n  * Add cJSON_SetBoolValue\n  * Add meson documentation\n  * Fix memory leak in merge_patch\n  * Fix conflicting target names 'uninstall'\n  * Bump cmake version to 3.0 and use new version syntax\n  * Print int without decimal places\n  * Fix 'cjson_utils-static' target not exist\n  * Add allocate check for replace_item_in_object\n  * Fix a null pointer crash in cJSON_ReplaceItemViaPointer\n","status":"published","published":"2024-05-25T08:47:48Z","modified":"2026-02-04T03:51:15.787085Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:14021-1","title":"cJSON-devel-1.7.18-1.1 on GA media","description":"These are all security issues fixed in the cJSON-devel-1.7.18-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:16:01.751977Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"USN-6784-1","title":"cjson vulnerabilities","description":"It was discovered that cJSON incorrectly handled certain input. An\nattacker could possibly use this issue to cause cJSON to crash, resulting\nin a denial of service. This issue only affected Ubuntu 22.04 LTS and\nUbuntu 23.10. (CVE-2023-50471, CVE-2023-50472)\n\nLuo Jin discovered that cJSON incorrectly handled certain input. An\nattacker could possibly use this issue to cause cJSON to crash, resulting\nin a denial of service. (CVE-2024-31755)\n","status":"published","published":"2024-05-23T13:00:48Z","modified":"2026-04-27T17:13:52.581685Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}