← All advisories

Critical severity9.8NVD Advisory· Published May 9, 2019· Updated Jun 17, 2026

CVE-2019-11835

CVE-2019-11835

Description

cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

cJSON/cJSONdescription
Davegamble/cjson/Cjsonllm-fuzzy2 versions
<1.7.11+ 1 more
- (no CPE)range: <1.7.11
- cpe:2.3:a:davegamble:cjson:*:*:*:*:*:*:*:*range: <1.7.11
Oracle Corporation/Timesten In Memory Database
cpe:2.3:a:oracle:timesten_in-memory_database:*:*:*:*:*:*:*:*
Range: <18.1.3.1.0

Patches

Vulnerability mechanics

References

4

github.com/DaveGamble/cJSON/compare/c69134d...93688cbnvdPatchThird Party Advisory
www.oracle.com/security-alerts/cpuoct2020.htmlnvdPatchThird Party Advisory
github.com/DaveGamble/cJSON/issues/338nvdExploitThird Party Advisory
github.com/DaveGamble/cJSON/releases/tag/v1.7.11nvdRelease NotesThird Party Advisory

News mentions

0

No linked articles in our index yet.