Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Projectgus

#30058of 53,622
8.8Total CVSS
Vulnerabilities · 1
PT-2018-9384
8.8
2018-08-20
Dave Gamble · Cjson · CVE-2018-1000216
**Name of the Vulnerable Software and Affected Versions** cJSON versions 1.7.2 and earlier **Description** The issue is related to a Double Free vulnerability in the cJSON library, which can result in a possible crash or Remote Code Execution (RCE). This can be exploited if an attacker can force the victim to print JSON data, and the exploitability depends on how the cJSON library is used, potentially allowing local or network-based attacks. **Recommendations** For cJSON versions 1.7.2 and earlier, update to version 1.7.3 to resolve the issue.