What’s Vulnerable › Products

DaveGamble cJSON vulnerabilities

16 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your DaveGamble cJSON version is affected

Latest DaveGamble cJSON vulnerabilities

• CVE-2026-87933 — DaveGamble cJSON cJSON_Utils.c cJSONUtils_MergePatch use after free (CVSS 7.3)
• CVE-2026-29036 — cJSON 1.7.19 Wrong-Key Modification via JSON Pointer Escape Decoding (CVSS 7.5)
• CVE-2026-67217 — cJSON JSON Patch Non-Atomic Application Destroys Data Before Validation (CVSS 5.3)
• CVE-2026-67216 — cJSON cJSON_Compare Exponential Complexity Denial of Service (CVSS 7.5)
• CVE-2026-67215 — cJSON JSON Patch copy/add Uncontrolled Recursion Stack Exhaustion (CVSS 7.5)
• CVE-2026-16554 — Integer Overflow Leading to Heap Buffer Overflow in cJSON (CVSS 7.8)
• CVE-2025-57052 — (CVSS 9.8)
• CVE-2023-50472 — (CVSS 7.5)
• CVE-2023-50471 — (CVSS 7.5)
• CVE-2019-1010239 — (CVSS 7.5)
• CVE-2019-11835 — (CVSS 9.8)
• CVE-2019-11834 — (CVSS 9.8)
• CVE-2016-10749 — (CVSS 9.8)
• CVE-2018-1000217 — (CVSS 9.8)
• CVE-2018-1000216 — (CVSS 8.8)
• CVE-2018-1000215 — (CVSS 7.5)