GitHub Advisoryadvisory · PyPI

GHSA-fh56-85cw-5pq6 UltraJSON vulnerable to Out-of-bounds Write

MEDIUM Published 2022-01-21 Modified 2024-11-18 Official page ↗
Aliases
CVE-2021-45958
Ecosystem
PyPI
Packages
ujson
Severity
Moderate
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weaknesses
CWE-787
Reviewed
2022-01-12

Affected packages

• PyPI ujson: >= 1.34, < 5.2.0 → fixed in 5.2.0

Description

UltraJSON (aka ujson) 1.34 through 5.1.0 has a stack-based buffer overflow in Buffer_AppendIndentUnchecked (called from encode).

Related

Alias · CVE (1)

  • CVE-2021-45958 UltraJSON (aka ujson) through 5.1.0 has a stack-based buffer overflow in Buffer_AppendIndentUnchecked (called from encode). vulnerability

Weakness · CWE (1)

  • CWE-787 Out-of-bounds Write weakness

References