oss-sec mailing list archives

Re: 33 Vulnerabilities in cJSON


From: Jeroen Roovers <jer () xs4all nl>
Date: Fri, 31 Jul 2026 04:59:07 +0200

On Thu, 30 Jul 2026 12:26:25 -0700
Collin Funk <collin.funk1 () gmail com> wrote:

Alan Coopersmith <alan.coopersmith () oracle com> writes:

https://joshua.hu/cjson-json-parser-cve-vulnerabilities says:  
cJSON is probably the most widely used JSON parser in the C world.
It’s vendored into ESP-IDF, into a lot of embedded firmware, and
                                               ^^^^^^^^^^^^^^^^^

Does anyone actually use platforms with 32-bit size_t? I guess maybe
some programs compiled for 32-bit x86 but run on x86_64?

Yes. :-)


Kind regards,
     jer


Current thread: