Product by DaveGamble
DaveGamble cJSON
16 known vulnerabilities in DaveGamble cJSON (DaveGamble), 0 of them actively exploited (CISA KEV).
Key figures
16
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2019-11835 | DaveGamble cJSON: Out-of-Bounds Access | 9.8 | |
| Critical | CVE-2019-11834 | DaveGamble cJSON: Out-of-Bounds Access | 9.8 | |
| Critical | CVE-2016-10749 | DaveGamble cJSON: Buffer Over-read | 9.8 | |
| Critical | CVE-2018-1000217 | DaveGamble cJSON: Use-After-Free | 9.8 | |
| High | CVE-2019-1010239 | DaveGamble/cJSON cJSON: Denial of Service | 7.5 | |
| High | CVE-2026-67215 | cJSON JSON Patch copy/add Uncontrolled Recursion Stack Exhaustion | 7.5 | |
| High | CVE-2018-1000216 | DaveGamble cJSON: Double Free | 8.8 | |
| High | CVE-2023-50471 | DaveGamble cJSON: security vulnerability | 7.5 | |
| High | CVE-2018-1000215 | DaveGamble cJSON: Denial of Service | 7.5 | |
| High | CVE-2026-67216 | cJSON cJSON_Compare Exponential Complexity Denial of Service | 7.5 | |
| Critical | CVE-2025-57052 | DaveGamble cJSON: Out-of-Bounds Access | 9.8 | |
| High | CVE-2026-87933 | DaveGamble cJSON cJSON_Utils.c cJSONUtils_MergePatch use after free | 7.3 | |
| High | CVE-2026-29036 | cJSON 1.7.19 Wrong-Key Modification via JSON Pointer Escape Decoding | 7.5 | |
| High | CVE-2023-50472 | DaveGamble cJSON: security vulnerability | 7.5 | |
| High | CVE-2026-16554 | Integer Overflow Leading to Heap Buffer Overflow in cJSON | 7.8 | |
| Medium | CVE-2026-67217 | cJSON JSON Patch Non-Atomic Application Destroys Data Before Validation | 5.3 |