CVE-2026-82803

Name of the Vulnerable Software and Affected Versions armink struct2json version 1.0

Description An issue exists in the JSON Deserialization component within the library struct2json/inc/s2jdef.h. A remote attacker can cause a null pointer dereference—a condition where the software attempts to read from a memory address that is null, typically resulting in a crash—by manipulating the valuestring argument passed to the S2J STRUCT GET string ELEMENT() function.

Recommendations As a temporary workaround, restrict the use of the S2J STRUCT GET string ELEMENT() function until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.