Expected Behavior Violation
CVE-2023-26819
Summary
cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {"a": true, "b": [ null,9999999999999999999999999999999999999999999999912345678901234567]}.
- HIGH
- LOCAL
- NONE
- UNCHANGED
- NONE
- NONE
- NONE
- LOW
CWE-440 - Expected Behavior Violation
A feature, API, or function does not perform according to its specification.
References
Advisory Timeline
- Published
