PT-2025-16271 · Unknown · Jsonschema2Pojo

Kar3Nk

·

Published

2025-04-14

·

Updated

2025-04-15

·

CVE-2025-3588

CVSS v3.1

5.3

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions joelittlejohn jsonschema2pojo version 1.2.2
Description A vulnerability has been found in the JSON File Handler component, affecting the apply function of the org/jsonschema2pojo/rules/SchemaRule.java file. This issue leads to a stack-based buffer overflow and requires a local attack to exploit. The exploit has been disclosed to the public and may be used. The vendor was contacted about this disclosure but did not respond.
Recommendations For joelittlejohn jsonschema2pojo version 1.2.2, as a temporary workaround, consider disabling the apply function of the org/jsonschema2pojo/rules/SchemaRule.java file until a patch is available. Restrict access to the JSON File Handler component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-121CWE-119

Related Identifiers

CVE-2025-3588
GHSA-66RC-VG9F-48M7

Affected Products

Jsonschema2Pojo