openSUSE-SU-2026:20340-1

csafDEsuse_csaf

Security update for cJSON

view advisory published 2026-03-11

Security update for cJSON

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2025-57052US—Exploit
cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.c, allowing remote attackers to bypass array bounds checking…
CVE-2023-26819US——
cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {"a": true, "b": [ null,9999999999999999999999999999999999999999999999912345678901234567]}.
02

references

External citations — patches, advisories, analysis.

03

remediations (16)

  • FixedcJSON-devel-0:1.7.19-160000.1.1.aarch64 as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • FixedcJSON-devel-0:1.7.19-160000.1.1.aarch64 as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • FixedcJSON-devel-0:1.7.19-160000.1.1.ppc64le as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • FixedcJSON-devel-0:1.7.19-160000.1.1.ppc64le as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • FixedcJSON-devel-0:1.7.19-160000.1.1.s390x as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • FixedcJSON-devel-0:1.7.19-160000.1.1.s390x as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • FixedcJSON-devel-0:1.7.19-160000.1.1.x86_64 as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • FixedcJSON-devel-0:1.7.19-160000.1.1.x86_64 as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibcjson1-0:1.7.19-160000.1.1.aarch64 as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibcjson1-0:1.7.19-160000.1.1.aarch64 as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibcjson1-0:1.7.19-160000.1.1.ppc64le as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibcjson1-0:1.7.19-160000.1.1.ppc64le as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibcjson1-0:1.7.19-160000.1.1.s390x as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibcjson1-0:1.7.19-160000.1.1.s390x as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibcjson1-0:1.7.19-160000.1.1.x86_64 as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibcjson1-0:1.7.19-160000.1.1.x86_64 as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan