Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-6566 EUVD-2025-19006GHSA-7c5x-vxj3-93v9

oatpp Oat++ Deserializer.cpp deserializeArray stack-based overflow

Published Jun 24, 2025 · Updated Jun 24, 2025 · Assigned by VulDB

Description

A vulnerability was found in oatpp Oat++ up to 1.3.1. It has been declared as critical. This vulnerability affects the function deserializeArray of the file src/oatpp/json/Deserializer.cpp. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected products

VendorProductAffectedFixed
oatpp Oat++ 1.3.0, 1.3.1 —

References