Description

cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.c, allowing remote attackers to bypass array bounds checking and access restricted data via malformed JSON pointer strings containing alphanumeric characters.

INFO

Published Date :

2025-09-03T00:00:00.000Z

Last Modified :

2025-11-03T18:13:42.953Z

Source :

mitre
AFFECTED PRODUCTS

The following products are affected by CVE-2025-57052 vulnerability.

Vendors Products
Cjson Project
  • Cjson
Davegamble
  • Cjson
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-57052.

URL Resource
https://lists.debian.org/debian-lts-announce/2025/09/msg00019.html cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-57052 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-57052 cve-icon
https://x-0r.com/posts/cJSON-Array-Index-Parsing-Vulnerability cve-icon cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact