Dave Gamble · Cjson · CVE-2018-1000217
**Name of the Vulnerable Software and Affected Versions**
cJSON versions 1.7.3 and earlier
**Description**
The issue is related to a Use After Free problem in the cJSON library, which can lead to a crash, data corruption, or even Remote Code Execution (RCE). The exploitability depends on how the application utilizes the cJSON library. If the application provides a network interface, it can be exploited over a network; otherwise, it is limited to local exploitation.
**Recommendations**
For cJSON versions 1.7.3 and earlier, update to version 1.7.4 or later to resolve the issue.