Critical DLA-4304-1 1 CVE

cjson - security update

Published Sep 18, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 11	cjson	1.7.14-1+deb11u3

Vulnerabilities 1

Critical 9.8

CVE-2025-57052 Public exploit

cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.…

cjson cjson cjson Debian Ubuntu Alpine

Sep 3, 2025