Critical severity9.8NVD Advisory· Published Aug 22, 2023· Updated Jun 17, 2026

CVE-2021-32292

Description

An issue was discovered in json-c from 20200420 (post 0.14 unreleased code) through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sample program json_parse which is located in the function parseit.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

JSON C/JSON Cllm-fuzzy3 versions
20200420 through 0.15-20200726+ 2 more
- (no CPE)range: 20200420 through 0.15-20200726
- cpe:2.3:a:json-c:json-c:0.15-20200726:*:*:*:*:*:*:*
- (no CPE)
NetApp/Active Iq Unified Manager
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*
osv-coords
pkg:bitnami/json-c
Range: >= 0.15-20200726.0, <= 0.15-20200726.0

Patches

Vulnerability mechanics

References

github.com/json-c/json-c/issues/654nvdExploitIssue Tracking
security.netapp.com/advisory/ntap-20230929-0010/nvdThird Party Advisory
www.debian.org/security/2023/dsa-5486nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000