~ / search / GHSA-cqmh-mpx2-g633

GHSA-cqmh-mpx2-g633

Improper Restriction of Operations within the Bounds of a Memory Buffer in python-cjson

Source: GitHub Advisory Database (reviewed) Moderate CVE-2010-1666

Packages

EcosystemPackageAffectedFixed in
PyPI python-cjson < 1.0.5.1 1.0.5.1

Details

As written in the advisory (Markdown source, shown as plain text).

Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows context-dependent attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors involving crafted Unicode input to the cjson.encode function.

References

External links from the advisory. They lead to third-party sites.