PT-2022-16002 · Jsonxx · Jsonxx

Jarlob + 1 · Published 2022-08-19 · Updated 2025-10-28 · CVE-2022-23460

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions jsonxx (affected versions not specified)

Description The issue is related to json parsing in jsonxx, which may lead to stack exhaustion in an address sanitized (ASAN) build. This can cause a Denial of Service if the program using the jsonxx library crashes. The project has been archived, and updates are not expected.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Uncontrolled Recursion

Stack Overflow

Weakness Enumeration

CWE-674

CWE-121

Related Identifiers

CVE-2022-23460

Affected Products

Jsonxx

References · 7

• https://osv.dev/vulnerability/CVE-2022-23460 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-23460 · Security Note
• https://securitylab.github.com/advisories/GHSL-2022-049_Jsonxx · Note
• https://t.me/cibsecurity/48459 · Telegram Post
• https://t.me/cvenotify/54284 · Telegram Post
• https://t.me/cvenotify/35002 · Telegram Post
• https://t.me/cveNotify/140698 · Telegram Post