Patchwire CVEs, their patch status, and feeds to follow them

CVE-2019-11834

Fixed in a distro release EPSS 3%

cJSON before 1.7.11 allows out-of-bounds access, related to \x00 in a string literal.

Published 2019-05-09 · CVE record · OSV

Products: davegamble cjson, oracle timesten_in-memory_database

Distro releases

ReleasePackageFixed in
Debian 12cjson1.7.10-1.1
Debian 13cjson1.7.10-1.1
Debian 14cjson1.7.10-1.1