Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Projectgus

#29803of 55,135
8.8Total CVSS
Vulnerabilities · 1
PT-2018-9384
8.8
2018-08-20
Dave Gamble · Cjson · CVE-2018-1000216
**Name of the Vulnerable Software and Affected Versions** cJSON versions 1.7.2 and earlier **Description** The issue is related to a Double Free vulnerability in the cJSON library, which can result in a possible crash or Remote Code Execution (RCE). This can be exploited if an attacker can force the victim to print JSON data, and the exploitability depends on how the cJSON library is used, potentially allowing local or network-based attacks. **Recommendations** For cJSON versions 1.7.2 and earlier, update to version 1.7.3 to resolve the issue.