CVE Database›Document archive›CVE-2021-32292

CVE-2021-32292

json-c: stack-buffer-overflow in parseit() in json_parse.c

Loading…

Severity

Unknown

Red Hat Product Security

0

CVSS 3.1

Review impact separately from score.

Published · August 22, 2023

Updated · June 27, 2026

Description

A flaw was found in the parseit() function in json_parse.c., a test app in the json-c library. The code error does not affect the library itself.

Statement

Vulnerable code was introduced in json-c 0.15-20200726. Red Hat Enterprise Linux ships json-c-0.14-11 and prior, therefore, it is not-affected.

This issue affects a test app and not the library itself, which lowers the impact of the flaw to none.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 0
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N

CWE-787 · Out-of-bounds Write