5.3
Medium
CVE-2025-0696 A NULL Pointer Dereference vulnerability in Cesanta Frozen versions less than 1.7 allows an attacker to induce a crash…
Description
A NULL Pointer Dereference vulnerability in Cesanta Frozen versions less than 1.7 allows an attacker to induce a crash of the component embedding the library by supplying a maliciously crafted JSON as input.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Frozen 1.7 | earliest → < 1.7 | 1.7 |