Security Advisory

CVE-2025-57052

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-09-03 00:00:00
Last updated 2025-11-03 18:13:42
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.c, allowing remote attackers to bypass array bounds checking and access restricted data via malformed JSON pointer strings containing alphanumeric characters.