Vulnerability in Davegamble Cjson

CVE-2018-1000215

Dave Gamble cJSON version 1.7.6 and earlier contains a CWE-772 vulnerability in cJSON library that can result in Denial of Service (DoS). This attack appear to be exploitable via If the attacker can force the data to be printed and the sys…

EPSS: 0.017 (74.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2018-1000215?
CVE-2018-1000215 is a high-severity vulnerability in Davegamble Cjson, classified under Missing Release of Resource after Effective Lifetime. CVSS score: 7.5/10. Published 2018-08-20.
How severe is CVE-2018-1000215?
High severity. CVSS v3 base score is 7.5 out of 10.