Known vulnerabilities in cJSON

Vendor: DaveGamble
Software: cJSON
Software CPE: cpe:2.3:a:davegamble:cjson:*:*:*:*:*:*:*:*
Website: https://github.com/DaveGamble
Total vulnerabilities: 12
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting cJSON cJSON is affected by 12 known vulnerabilities: 4 high, 8 medium Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU115011 - Out-of-bounds read
CVE-2025-57052		 CWE-125 Medium
No
No
 - 09.09.2025 SB2025090958
SB2025091516
SB2025101028
and 10 more
#VU114342 - Improper input validation
CVE-2023-26819		 CWE-20 Medium
No
No
 1.7.16 21.08.2025 SB2023071510
SB2025082153
SB2025082160
and 6 more
#VU89429 - Improper input validation
CVE-2024-31755		 CWE-20 Medium
No
No
 1.7.18 14.05.2024 SB2024051431
SB2024092634
SB2024092638
and 4 more
#VU88522 - Missing release of memory after effective lifetime
CVE-2018-1000215		 CWE-401 Medium
No
No
 1.7.7 15.04.2024 SB2019100328
SB2024041561
SB2024041562
#VU84772 - NULL Pointer Dereference
CVE-2023-50471		 CWE-476 Medium
No
No
 1.7.17 26.12.2023 SB2023122617
SB2024040701
SB2024040702
and 6 more
#VU84771 - NULL Pointer Dereference
CVE-2023-50472		 CWE-476 Medium
No
No
 1.7.17 26.12.2023 SB2023122617
SB2024040705
SB2024102547
and 2 more
#VU78269 - NULL Pointer Dereference
 CWE-476 Medium
No
No
 1.7.16 15.07.2023 SB2023071510
#VU35696 - Improper Check for Unusual or Exceptional Conditions
CVE-2019-1010239		 CWE-754 Medium
No
No
 - 19.07.2019 SB2019071910
SB2020102710
#VU31075 - Memory corruption
CVE-2019-11834		 CWE-119 High
No
No
 1.7.11 09.05.2019 SB2019050917
#VU31076 - Memory corruption
CVE-2019-11835		 CWE-119 High
No
No
 1.7.11 09.05.2019 SB2019050917
#VU31229 - Double Free
CVE-2018-1000216		 CWE-415 High
No
No
 1.7.3 20.08.2018 SB2018082020
#VU31230 - Use After Free
CVE-2018-1000217		 CWE-416 High
No
No
 1.7.4 20.08.2018 SB2018082021