Skip to content
5.3 Medium

CVE-2025-0696 A NULL Pointer Dereference vulnerability in Cesanta Frozen versions less than 1.7 allows an attacker to induce a crash…

Description

A NULL Pointer Dereference vulnerability in Cesanta Frozen versions less than 1.7 allows an attacker to induce a crash of the component embedding the library by supplying a maliciously crafted JSON as input.

Affected products and versions

Product Affected versions Fixed in
Frozen 1.7 earliest → < 1.7 1.7
The 2 CVEs of Frozen →
Track this CVE