CVE-2024-31755

Published: Apr 26, 2024Modified: Jun 17, 2026

7.6

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

Exploitability: 2.8 / Impact: 4.7

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

cJSON v1.7.17 was discovered to contain a segmentation violation, which can trigger through the second parameter of function cJSON_SetValuestring at cJSON.c.

Affected (1)

Products: Cjson Project: Cjson

Cjson Project

1 product

Cjson

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Cjson Project Cjson	Version 1.7.17

Related CWEs

CWE-476

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (2)

https://github.com/DaveGamble/cJSON/issues/839

Source: cve@mitre.org

ExploitIssue TrackingVendor Advisory

https://github.com/DaveGamble/cJSON/issues/839

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingVendor Advisory

Timeline

No history available yet.