CVE-2019-11834

cJSON before 1.7.11 allows out-of-bounds access, related to \x00 in a string literal.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-05-09

Last modified

2024-08-04

Weaknesses

CWE-125, CWE-787

Affected products

• Cjson (Davegamble)
• Timesten In-memory Database (Oracle)

References

• https://github.com/DaveGamble/cJSON/compare/c69134d...93688cb
• https://github.com/DaveGamble/cJSON/issues/337
• https://github.com/DaveGamble/cJSON/releases/tag/v1.7.11
• https://www.oracle.com/security-alerts/cpuoct2020.html