CVE-2022-23460CWE-121

Stack overflow in Jsonxx

Medium · published August 19, 2022

CVSS v3.1
5.9
EPSS
1%
Percentile
53.6
In the wild
Unconfirmed
What it is

Jsonxx or Json++ is a JSON parser, writer and reader written in C++. In affected versions of jsonxx json parsing may lead to stack exhaustion in an address sanitized (ASAN) build. This issue may lead to Denial of Service if the program using the jsonxx library crashes. This issue exists on the current commit of the jsonxx project and the project itself has been archived. Updates are not expected. Users are advised to find a replacement.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00725 · 53.6th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2022-08-19T20:10Z
EPSS history
Timeline
  • 19 AUG 20:10Z
    Stack overflow in Jsonxx
    cvelistv5