ZeroDay Findings
Sign inSign up

Findings

CVE-2020-12762

json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.

Published May 9, 2020 · updated Oct 14, 2026 · json-c json-c

json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.

Timeline

Detection, updates, and resolution for this record.

  1. May 9, 2020 · NIST NVD

    Detected

    json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.

  2. Oct 14, 2026 · NIST NVD

    Updated

    json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.

Affected

  • cpe canonical/ubuntu linux12.04
  • cpe debian/debian linux10.0
  • cpe debian/debian linux8.0
  • cpe debian/debian linux9.0
  • cpe fedoraproject/fedora30
  • cpe fedoraproject/fedora31
  • cpe fedoraproject/fedora32
  • cpe json-c/json-cversion unspecified
  • cpe siemens/sinec insversion unspecified

Sources

  • CVE.orgCVE-2020-12762

    Official CVE identifier

    cve.org
  • NIST NVDCVE-2020-12762

    json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.

    nvd.nist.gov

References