CVE-2021-45958

UltraJSON (aka ujson) through 5.1.0 has a stack-based buffer overflow in Buffer_AppendIndentUnchecked (called from encode)

published December 31, 2021

CVSS
—
EPSS
2%
Percentile
74.9
In the wild
Unconfirmed
What it is

UltraJSON (aka ujson) through 5.1.0 has a stack-based buffer overflow in Buffer_AppendIndentUnchecked (called from encode). Exploitation can, for example, use a large amount of indentation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01550 · 74.9th percentile
Published
2021-12-31T23:52Z
EPSS history
Timeline
  • 31 DEC 23:52Z
    UltraJSON (aka ujson) through 5.1.0 has a stack-based buffer overflow in Buffer_AppendIndentUnchecked (called from encode)
    cvelistv5