CVE-2021-32292
json-c: stack-buffer-overflow in parseit() in json_parse.c
Severity
UnknownRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 22, 2023
Updated · June 27, 2026
Description
A flaw was found in the parseit() function in json_parse.c., a test app in the json-c library. The code error does not affect the library itself.
Statement
Vulnerable code was introduced in json-c 0.15-20200726. Red Hat Enterprise Linux ships json-c-0.14-11 and prior, therefore, it is not-affected.
This issue affects a test app and not the library itself, which lowers the impact of the flaw to none.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
CWE-787 · Out-of-bounds Write