GHSA-cqmh-mpx2-g633Medium

Improper Restriction of Operations within the Bounds of a Memory Buffer in python-cjson

Published
May 17, 2022
Last Modified
October 15, 2024

🔗 CVE IDs covered (1)

CVE-2010-1666 →

📋 Description

Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows context-dependent attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors involving crafted Unicode input to the cjson.encode function.

🎯 Affected products1

  • pip/python-cjson:<= 1.0.5

🔗 References (6)