7.8
High
CVE-2020-12762 json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by…
Description
json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| n/a | Versions not published | |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 1.1 | earliest → < 1.1 | 1.1 |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| RUGGEDCOM ROX MX5000 2.17 | earliest → < 2.17.0 | 2.17.0 |
| RUGGEDCOM ROX MX5000RE 2.17 | earliest → < 2.17.0 | 2.17.0 |
| RUGGEDCOM ROX RX1400 2.17 | earliest → < 2.17.0 | 2.17.0 |
| RUGGEDCOM ROX RX1500 2.17 | earliest → < 2.17.0 | 2.17.0 |
Show the 7 other branches Hide the 7 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| RUGGEDCOM ROX RX1501 2.17 | earliest → < 2.17.0 | 2.17.0 |
| RUGGEDCOM ROX RX1510 2.17 | earliest → < 2.17.0 | 2.17.0 |
| RUGGEDCOM ROX RX1511 2.17 | earliest → < 2.17.0 | 2.17.0 |
| RUGGEDCOM ROX RX1512 2.17 | earliest → < 2.17.0 | 2.17.0 |
| RUGGEDCOM ROX RX1524 2.17 | earliest → < 2.17.0 | 2.17.0 |
| RUGGEDCOM ROX RX1536 2.17 | earliest → < 2.17.0 | 2.17.0 |
| RUGGEDCOM ROX RX5000 2.17 | earliest → < 2.17.0 | 2.17.0 |
References
- github.com github.com
- github.com github.com
- FEDORA-2020-63c6f4ab1d lists.fedoraproject.org
- USN-4360-1 usn.ubuntu.com
- FEDORA-2020-847ad856ab lists.fedoraproject.org
- FEDORA-2020-7eb7eac270 lists.fedoraproject.org
- [debian-lts-announce] 20200531 [SECURITY] [DLA 2228-1] json-c security update lists.debian.org
- [debian-lts-announce] 20200531 [SECURITY] [DLA 2228-2] json-c regression update lists.debian.org
- USN-4360-4 usn.ubuntu.com
- GLSA-202006-13 security.gentoo.org
- [debian-lts-announce] 20200730 [SECURITY] [DLA 2301-1] json-c security update lists.debian.org
- DSA-4741 www.debian.org
- security.netapp.com security.netapp.com
- cert-portal.siemens.com cert-portal.siemens.com
- [debian-lts-announce] 20230620 [SECURITY] [DLA 3461-1] libfastjson security update lists.debian.org
Timeline
- Published
- Last modified
Other CVEs of n/a
The 144658 CVEs of n/a →
CVE-2026-106713
An issue in FreeReels for Android version 2.3.11 allows a remote attacker to obtain sensitive information via the…
Not rated
CVE-2026-106715
NewsBreak for Android version 26.21.0 treats data:text/html; URLs as trusted in its WebView JavaScript bridge origin…
Not rated
CVE-2026-106714
Chewy for Android version 26.23.0 does not adequately validate the host of a product-details deep link before loading it…
Not rated
CVE-2026-106716
ReelShort for Android version 3.8.55 loads an attacker-controlled activityUrl supplied through its cmsvictor://open deep…
Not rated