CVE-2022-45494

Buffer overflow vulnerability in function json_parse_object in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 (November 14, 2022) allows attackers to code arbitrary code and gain escalated privileges.

Score

CVSS 3.1 7.8 High

Status

Modified - cve@mitre.org

Published

2023-01-31

Last modified

2025-03-27

Weaknesses

CWE-787

Affected products

• Json.h (Json.h Project)

References

• https://github.com/hyrathon/trophies/security/advisories/GHSA-wvpq-p7pp-cj6m
• https://github.com/sheredom/json.h
• https://github.com/sheredom/json.h/issues/93
• https://github.com/sheredom/json.h/issues/97