Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Hhallen

#26190of 53,630
9.8Total CVSS
Vulnerabilities · 1
PT-2018-9385
9.8
2018-08-20
Dave Gamble · Cjson · CVE-2018-1000217
**Name of the Vulnerable Software and Affected Versions** cJSON versions 1.7.3 and earlier **Description** The issue is related to a Use After Free problem in the cJSON library, which can lead to a crash, data corruption, or even Remote Code Execution (RCE). The exploitability depends on how the application utilizes the cJSON library. If the application provides a network interface, it can be exploited over a network; otherwise, it is limited to local exploitation. **Recommendations** For cJSON versions 1.7.3 and earlier, update to version 1.7.4 or later to resolve the issue.