CVE-2019-11835
Fixed in a distro release EPSS 3%
cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments.
Products: davegamble cjson, oracle timesten_in-memory_database
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cjson | 1.7.10-1.1 |
| Debian 13 | cjson | 1.7.10-1.1 |
| Debian 14 | cjson | 1.7.10-1.1 |