Skip to content
Davegamble vulnerabilities
Newest
-
cjson project cjson
DaveGamble cJSON cJSON_Utils.c cJSONUtils_MergePatch use after free
CVE-2026-87933
6.9 Medium
-
cjson project cjson
cJSON 1.7.19 Wrong-Key Modification via JSON Pointer Escape Decoding
CVE-2026-29036
8.7 High
-
cjson project cjson
cJSON JSON Patch Non-Atomic Application Destroys Data Before Validation
CVE-2026-67217
6.9 Medium
-
cjson project cjson
cJSON cJSON_Compare Exponential Complexity Denial of Service
CVE-2026-67216
Fix available
8.2 High
-
cjson project cjson
cJSON JSON Patch copy/add Uncontrolled Recursion Stack Exhaustion
CVE-2026-67215
Fix available
8.7 High
-
cjson project cjson
Integer Overflow Leading to Heap Buffer Overflow in cJSON
CVE-2026-16554
Fix available
5.1 Medium
-
davegamble cjson
cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer...
CVE-2025-57052
Public exploitFix available
9.8 Critical
-
davegamble cjson
cJSON v1.7.16 was discovered to contain a segmentation violation via the function...
CVE-2023-50472
Fix available
7.5 High
-
davegamble cjson
cJSON v1.7.16 was discovered to contain a segmentation violation via the function...
CVE-2023-50471
Fix available
7.5 High
-
cjson project cjson, oracle timesten in-memory database +1 more
DaveGamble/cJSON cJSON 1.7.8 is affected by: Improper Check for Unusual or Exceptional Conditions...
CVE-2019-1010239
Fix available
7.5 High
-
davegamble cjson, oracle timesten in-memory database +1 more
cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments.
CVE-2019-11835
Fix available
9.8 Critical
-
davegamble cjson, oracle timesten in-memory database +1 more
cJSON before 1.7.11 allows out-of-bounds access, related to \x00 in a string literal.
CVE-2019-11834
Fix available
9.8 Critical
-
davegamble cjson
parse_string in cJSON.c in cJSON before 2016-10-02 has a buffer over-read, as demonstrated by a...
CVE-2016-10749
9.8 Critical
-
davegamble cjson
Dave Gamble cJSON version 1.7.3 and earlier contains a CWE-416: Use After Free vulnerability in...
CVE-2018-1000217
Fix available
9.8 Critical
-
davegamble cjson
Dave Gamble cJSON version 1.7.2 and earlier contains a CWE-415: Double Free vulnerability in...
CVE-2018-1000216
Fix available
8.8 High
-
davegamble cjson
Dave Gamble cJSON version 1.7.6 and earlier contains a CWE-772 vulnerability in cJSON library...
CVE-2018-1000215
Fix available
7.5 High