Skip to content
OpenAdvisories
Unscored USN-8189-1 0 CVEs

rapidjson vulnerability

Published Apr 20, 2026 · Updated Jun 25, 2026

Summary

It was discovered that RapidJSON did not properly protect against integer
overflows in certain instances when parsing JSON text. A remote attacker
could possibly use this issue to craft a malicious JSON file, that when
read by RapidJSON, would lead to an elevation of privilege, resulting in
the potential disclosure of sensitive information.

Fixed packages 5

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS rapidjson 0.12~git20141031-3ubuntu0.1~esm2
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS rapidjson 1.1.0+dfsg2-3ubuntu0.1~esm2
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS rapidjson 1.1.0+dfsg2-5ubuntu1+esm2
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS rapidjson 1.1.0+dfsg2-7ubuntu0.1~esm2
Ubuntu · Pro 24.04 LTS Pro:24.04:LTS rapidjson 1.1.0+dfsg2-7.2ubuntu0.1~esm2

References

  • report
    https://ubuntu.com/security/CVE-2024-39684