PT-2026-34531 · Rapidjson · Rapidjson

Published 2026-04-20 · Updated 2026-04-20

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions RapidJSON versions prior to 1.1.0+dfsg2-5ubuntu1+esm2

Description RapidJSON fails to properly protect against integer overflows during the parsing of JSON text. A remote attacker could exploit this by crafting a malicious JSON file that, when processed, leads to an elevation of privilege and the potential disclosure of sensitive information.

Recommendations Update to version 1.1.0+dfsg2-5ubuntu1+esm2.

Related Identifiers

USN-8189-1

Affected Products

Rapidjson

References · 3

• https://ubuntu.com/security/notices/USN-8189-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-39684 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8189-1 · Vendor Advisory