{"id":"OSV-2024-1322","aliases":[],"status":"published","title":"Security exception in com.alibaba.fastjson2.JSONReader.readObject","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=379180973\n\n```\nCrash type: Security exception\nCrash state:\ncom.alibaba.fastjson2.JSONReader.readObject\njava.base/java.nio.charset.CharsetEncoder.replaceWith\njava.base/java.nio.charset.CharsetEncoder.\u003cinit\u003e\n```","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2024-11-18T00:00:16.618504Z","modified":"2026-10-20T17:24:55Z","affected":[{"source":"osv","ecosystem":"OSS-Fuzz","package":"fastjson2","ranges":[{"type":"GIT","events":[{"introduced":"87cb869a138c8ae36108026b8caadb70f62ef55a"},{"fixed":"e6ff30a96ba22cae7df224dfaf1182daa89ad4c0"}]}],"versions":["2.0.30","2.0.31","2.0.32","2.0.33","2.0.34.1.android4","2.0.34.android4","2.0.35","2.0.35.android4","2.0.36","2.0.36.android4","2.0.37","2.0.37.android4","2.0.38.android4","2.0.39","2.0.39.android4","2.0.40","2.0.40.android4","2.0.41","2.0.41.android4","2.0.42","2.0.42.android","2.0.43","2.0.43.android4","2.0.44","2.0.44.android","2.0.45","2.0.45.android4","2.0.46","2.0.46.android4","2.0.46.android5","2.0.46.android8","2.0.47","2.0.47.android5","2.0.47.android8","2.0.48","2.0.48.android5","2.0.48.anroid8","2.0.49","2.0.49.android5","2.0.49.android8","2.0.50","2.0.50.android4","2.0.50.android8","2.0.51","2.0.51.android5","2.0.51.android8","2.0.52","2.0.52.android5","2.0.52.android8","2.0.53","2.0.53.android5","2.0.53.android8","2.0.54.android5","2.0.54.android8","2.0.55.android5","2.0.55.android8","2.0.56.android5","2.0.56.android8","2.0.66.android5","2.0.66.android8","2.0.65.android8","2.0.65.android5","2.0.64.android5","2.0.64.android8","2.0.61.android8","2.0.61.android5","2.0.63.android5","2.0.63.android8","2.0.60.android8","2.0.60.android5","2.0.60.android","2.0.59.android8","2.0.59.android5","2.0.58.android5","2.0.58.android8","2.0.57.android8","2.0.57.android5","2.0.38","2.0.34"]}],"references":[{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=379180973","tags":["report"]}],"sources":{"osv":[{"id":"OSV-2024-1322","title":"Security exception in com.alibaba.fastjson2.JSONReader.readObject","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=379180973\n\n```\nCrash type: Security exception\nCrash state:\ncom.alibaba.fastjson2.JSONReader.readObject\njava.base/java.nio.charset.CharsetEncoder.replaceWith\njava.base/java.nio.charset.CharsetEncoder.\u003cinit\u003e\n```\n","status":"published","published":"2024-11-18T00:00:16.618504Z","modified":"2026-10-20T17:24:55.247981348Z","updated_at":"2026-11-02T15:52:49.981578Z"}]}}