CVE-2023-53154
parse_string in cJSON before 1.7.18 has a heap-based buffer over-read via {"1":1, with no trailing newline if cJSON_ParseWithLength is called.
Published: 2025-05-23 · CVSS: 2.9 · CVSS 3.1
parse_string in cJSON before 1.7.18 has a heap-based buffer over-read via {"1":1, with no trailing newline if cJSON_ParseWithLength is called.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7