PT-2025-17394

CVE-2023-26819

·

Published

2025-04-19

·

Updated

2026-03-11

Description by

CVSS 3.1
2.9
Low
MetricsAV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions cJSON version 1.7.15
Description The issue might allow a denial of service via a crafted JSON document. For example, a document such as {"a": true, "b": [ null,9999999999999999999999999999999999999999999999912345678901234567]} could be used.
Recommendations For cJSON version 1.7.15, as a temporary workaround, consider validating JSON documents to prevent excessively large values in arrays, such as the b array in the example, until a patch is available.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
AZL-60883
AZL-60889
DLA-4216-1
OESA-2025-1965
OESA-2025-1992
OESA-2025-1993
OESA-2025-1994
OESA-2025-1995
OPENSUSE-SU-2025:15583-1
OPENSUSE-SU-2026:20340-1
SUSE-SU-2025:03520-1
USN-7973-1
Found an issue in the description? Have something to add? Feel free to write us 👾