CVE-2020-12762 json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by…

Description

json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
n/a	Versions non publiées
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1	3.1.0 → < 3.1.5	3.1.5
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1	3.1.0 → < 3.1.5	3.1.5
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 1.1	premières → < 1.1	1.1
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1	3.1.0 → < 3.1.5	3.1.5
RUGGEDCOM ROX MX5000 2.17	premières → < 2.17.0	2.17.0
RUGGEDCOM ROX MX5000RE 2.17	premières → < 2.17.0	2.17.0
RUGGEDCOM ROX RX1400 2.17	premières → < 2.17.0	2.17.0
RUGGEDCOM ROX RX1500 2.17	premières → < 2.17.0	2.17.0

Afficher les 7 autres branches Masquer les 7 autres branches

Produit	Versions touchées	Corrigé en
RUGGEDCOM ROX RX1501 2.17	premières → < 2.17.0	2.17.0
RUGGEDCOM ROX RX1510 2.17	premières → < 2.17.0	2.17.0
RUGGEDCOM ROX RX1511 2.17	premières → < 2.17.0	2.17.0
RUGGEDCOM ROX RX1512 2.17	premières → < 2.17.0	2.17.0
RUGGEDCOM ROX RX1524 2.17	premières → < 2.17.0	2.17.0
RUGGEDCOM ROX RX1536 2.17	premières → < 2.17.0	2.17.0
RUGGEDCOM ROX RX5000 2.17	premières → < 2.17.0	2.17.0

Autres CVE de n/a

Les 144658 CVE de n/a →

CVE-2026-106713 An issue in FreeReels for Android version 2.3.11 allows a remote attacker to obtain sensitive information via the… Non notée CVE-2026-106715 NewsBreak for Android version 26.21.0 treats data:text/html; URLs as trusted in its WebView JavaScript bridge origin… Non notée CVE-2026-106714 Chewy for Android version 26.23.0 does not adequately validate the host of a product-details deep link before loading it… Non notée CVE-2026-106716 ReelShort for Android version 3.8.55 loads an attacker-controlled activityUrl supplied through its cmsvictor://open deep… Non notée