High USN-4360-1 1 CVE

json-c vulnerability

Published May 14, 2020 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

It was discovered that json-c incorrectly handled certain JSON files.
An attacker could possibly use this issue to execute arbitrary code.

Fixed packages 4

Release	Package	Fixed in
Ubuntu · 16.04 LTS 16.04:LTS	json-c	0.11-4ubuntu2.1
Ubuntu · 18.04 LTS 18.04:LTS	json-c	0.12.1-1.3ubuntu0.1
Ubuntu · 20.04 LTS 20.04:LTS	json-c	0.13.1+dfsg-7ubuntu0.1
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS	json-c	0.11-3ubuntu1.2+esm1

Vulnerabilities 1

High 7.8

CVE-2020-12762

json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_…

json-c json-c json-c libfastjson Debian Ubuntu Azure Linux Alpine

May 9, 2020

References

report
https://ubuntu.com/security/CVE-2020-12762