CVE-2025-57052
cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.c, allowing remote attackers to bypass array bounds checking and access restricted data via malformed JSON pointer strings containing alphanumeric characters.
Vendor
Product
CWE
Yayın Tarihi
2025-09-03 15:15:38
Güncelleme
2025-11-03 19:16:12
Source Identifier
cve@mitre.org
KEV Date Added
-