Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The extractFrom function in Internals/QuotedString.cpp in Arduino JSON before 4.5 allows remote attackers to cause a denial of service (crash) via a JSON string with a \ (backslash) followed by a terminator, as demonstrated by "\\\0", which triggers a buffer overflow and over-read.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Arduino JSON 缓冲区溢出漏洞
Vulnerability Description
Arduino JSON是一个运行于嵌入式系统的JSON库。 Arduino JSON 4.5之前版本的Internals/QuotedString.cpp脚本中的‘extractFrom’函数存在安全漏洞。远程攻击者可借助特制的JSON字符串（在终止字符后添加‘\’字符）利用该漏洞造成拒绝服务（崩溃）。
CVSS Information
N/A
Vulnerability Type
N/A