Davegamble Cjson vulnerabilities

• cjson project cjson DaveGamble cJSON cJSON_Utils.c cJSONUtils_MergePatch use after free CVE-2026-87933 6.9 MediumSeptember 10, 2026
• cjson project cjson cJSON 1.7.19 Wrong-Key Modification via JSON Pointer Escape Decoding CVE-2026-29036 8.7 HighAugust 11, 2026
• cjson project cjson cJSON JSON Patch Non-Atomic Application Destroys Data Before Validation CVE-2026-67217 6.9 MediumJuly 29, 2026
• cjson project cjson cJSON cJSON_Compare Exponential Complexity Denial of Service CVE-2026-67216 Fix available 8.2 HighJuly 29, 2026
• cjson project cjson cJSON JSON Patch copy/add Uncontrolled Recursion Stack Exhaustion CVE-2026-67215 Fix available 8.7 HighJuly 29, 2026
• cjson project cjson Integer Overflow Leading to Heap Buffer Overflow in cJSON CVE-2026-16554 Fix available 5.1 MediumJuly 27, 2026
• davegamble cjson cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer... CVE-2025-57052 Public exploitFix available 9.8 CriticalSeptember 3, 2025
• davegamble cjson cJSON v1.7.16 was discovered to contain a segmentation violation via the function... CVE-2023-50472 Fix available 7.5 HighDecember 14, 2023
• davegamble cjson cJSON v1.7.16 was discovered to contain a segmentation violation via the function... CVE-2023-50471 Fix available 7.5 HighDecember 14, 2023
• cjson project cjson, oracle timesten in-memory database +1 more DaveGamble/cJSON cJSON 1.7.8 is affected by: Improper Check for Unusual or Exceptional Conditions... CVE-2019-1010239 Fix available 7.5 HighJuly 19, 2019
• davegamble cjson, oracle timesten in-memory database +1 more cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments. CVE-2019-11835 Fix available 9.8 CriticalMay 9, 2019
• davegamble cjson, oracle timesten in-memory database +1 more cJSON before 1.7.11 allows out-of-bounds access, related to \x00 in a string literal. CVE-2019-11834 Fix available 9.8 CriticalMay 9, 2019
• davegamble cjson parse_string in cJSON.c in cJSON before 2016-10-02 has a buffer over-read, as demonstrated by a... CVE-2016-10749 9.8 CriticalApril 29, 2019
• davegamble cjson Dave Gamble cJSON version 1.7.3 and earlier contains a CWE-416: Use After Free vulnerability in... CVE-2018-1000217 Fix available 9.8 CriticalAugust 20, 2018
• davegamble cjson Dave Gamble cJSON version 1.7.2 and earlier contains a CWE-415: Double Free vulnerability in... CVE-2018-1000216 Fix available 8.8 HighAugust 20, 2018
• davegamble cjson Dave Gamble cJSON version 1.7.6 and earlier contains a CWE-772 vulnerability in cJSON library... CVE-2018-1000215 Fix available 7.5 HighAugust 20, 2018