CVE Feed

    Dashboard / CVE / CVE-2026-29036

    CVE-2026-29036

    cJSON versions 1.5.0 through 1.7.19 contain an incorrectly-resolved name or reference vulnerability in the decode_pointer_inplace() function within cJSON_Utils.c that allows unauthenticated attackers to cause JSON Patch operations to target wrong object keys by supplying crafted JSON Pointer escape sequences (~0 or ~1) in patch paths. Attackers can submit malicious RFC 6902 JSON Patch input to applications using cJSONUtils_ApplyPatches() or cJSONUtils_ApplyPatchesCaseSensitive() to silently corrupt data or delete unintended keys, potentially bypassing authorization controls in applications that rely on JSON Patch for access-controlled data modification.

    Published:Aug 11, 2026
    Last Modified:Aug 14, 2026
    EPS:Aug 11, 2026
    EPSS Score:0.00258
    CVSS Score:7.5

    Affected Products

    Vendor
    Davegamble
    Product
    Cjson

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-87933 (CVSS 5.5) — A vulnerability was found in DaveGamble cJSON up to 1.7.19. The affected element is the function cJSONUtils_Me…
    CVE-2026-67217 (CVSS 6.9) — cJSON through 1.7.19 applies RFC 6902 JSON Patch operations non-atomically in apply_patch() in cJSON_Utils.c. …
    CVE-2026-67216 (CVSS 8.2) — cJSON through 1.7.19 contains an inefficient algorithmic complexity flaw in cJSON_Compare(). When comparing ob…
    CVE-2026-67215 (CVSS 8.7) — cJSON through 1.7.19 is vulnerable to uncontrolled recursion leading to stack exhaustion when an untrusted RFC…
    CVE-2026-16554 (CVSS 5.1) — cJSON library is vulnerable to an integer overflow in the print_string_ptr() function in cJSON.c on 32-bit pla…
    CVE-2025-57052 (CVSS 9.8) — cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJS…
    CVE-2023-50471 (CVSS 7.5) — cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_InsertItemInArray at c…
    CVE-2023-50472 (CVSS 7.5) — cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_SetValuestring at cJSO…
    CVE-2019-1010239 (CVSS 7.5) — DaveGamble/cJSON cJSON 1.7.8 is affected by: Improper Check for Unusual or Exceptional Conditions. The impact …
    CVE-2019-11835 (CVSS 9.8) — cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments.…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High