PT-2026-28436

CVE-2026-32285

·

Published

2026-03-16

·

Updated

2026-09-30

Description by

CVSS 2.0
7.8
High
MetricsAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions versions prior to 2026
Description The Delete function does not correctly validate offsets when processing malformed JSON input. This can result in a negative slice index and a runtime panic, potentially leading to a denial of service attack.
Recommendations Ensure proper validation of offsets when processing JSON input for the Delete function.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-1285: Improper Validation of Specified Index, Position, or Offset in Input
CWE-20: Improper Input Validation
CWE-125: Out-of-bounds Read
CWE-129: Improper Validation of Array Index
Related identifiers
CVE-2026-32285
BDU:2026-04782
GHSA-6G7G-W4F8-9C9X
CLEANSTART-2026-AP92343
CLEANSTART-2026-AQ65185
CLEANSTART-2026-BG69533
CLEANSTART-2026-DA99134
CLEANSTART-2026-DM19620
CLEANSTART-2026-DO31246
CLEANSTART-2026-FH54780
CLEANSTART-2026-HQ88036
CLEANSTART-2026-JY63371
CLEANSTART-2026-KS29431
CLEANSTART-2026-PM81907
CLEANSTART-2026-PY36202
CLEANSTART-2026-WA14162
CLEANSTART-2026-WA84208
CLEANSTART-2026-YZ90223
GO-2026-4514
OPENSUSE-SU-2026:10731-1
OPENSUSE-SU-2026:20788-1
OPENSUSE-SU-2026:21483-1
RHSA-2026:35111
RHSA-2026:7191
SUSE-SU-2026:1135-1
SUSE-SU-2026:21756-1
SUSE-SU-2026:21827-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com