All 9 CVE vulnerabilities found in cJSON, with AI-generated Chinese analysis, references, and POCs.
Vendor: DaveGamble/cJSON
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-87933 | DaveGamble cJSON cJSON_Utils.c cJSONUtils_MergePatch use after free CWE-416 | 7.3 | High | 2026-09-10 |
| CVE-2026-29036 | cJSON 1.7.19 Wrong-Key Modification via JSON Pointer Escape Decoding CWE-706 | 7.5 | High | 2026-08-11 |
| CVE-2026-67216 | cJSON cJSON_Compare Exponential Complexity Denial of Service CWE-407 | 5.9 | Medium | 2026-07-29 |
| CVE-2026-67217 | cJSON JSON Patch Non-Atomic Application Destroys Data Before Validation CWE-696 | 5.3 | Medium | 2026-07-29 |
| CVE-2026-67215 | cJSON JSON Patch copy/add Uncontrolled Recursion Stack Exhaustion CWE-674 | 7.5 | High | 2026-07-29 |
| CVE-2026-16554 | Integer Overflow Leading to Heap Buffer Overflow in cJSON CWE-190 | 5.1 | Medium | 2026-07-27 |
| CVE-2023-53154 | cJSON 缓冲区错误漏洞 CWE-125 | 2.9 | Low | 2025-05-23 |
| CVE-2023-26819 | cJSON 安全漏洞 CWE-440 | 2.9 | Low | 2025-04-19 |
| CVE-2019-1010239 | DaveGamble/cJSON cJSON 代码问题漏洞 | 7.5 | - | 2019-07-19 |
All 9 known CVE vulnerabilities affecting cJSON with full Chinese analysis, references, and POCs where available.