CVE-2018-1000215

HIGH 7.5CVE-2018-1000215 · Published 20/08/2018 · updated 17/06/2026

In short

CVE-2018-1000215 is a HIGH (CVSS 7.5) vulnerability affecting cjson (davegamble).
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 77.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
cjson davegamble	`≤ 1.7.6`	No fix yet

Description

Dave Gamble cJSON version 1.7.6 and earlier contains a CWE-772 vulnerability in cJSON library that can result in Denial of Service (DoS). This attack appear to be exploitable via If the attacker can force the data to be printed and the system is in low memory it can force a leak of memory. This vulnerability appears to have been fixed in 1.7.7.

References

DaveGamble/cJSON · Third Party Advisory

More vulnerabilities in cjson

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

cjson

davegamble

≤ 1.7.6

No fix yet

Description

More vulnerabilities in cjson

See all →