CVE-2018-1000215 Dave Gamble cJSON version 1.7.6 and earlier contains a CWE

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Identified in cJSON Library Affecting Versions Prior to 1.7.11 Two vulnerabilities have been reported in the cJSON library, affecting versions prior to 1.7.11. CVE-2019-11835, published on May 9, 2019, and CVE-2018-1000215, published on August 20, 2018, expose users to potential security risks. Users of cJSON versions 1.7.6 and earlier should update to mitigate these vulnerabilities. 2 sources 39