CVE-2021-27568

MediumCVSS 5.9

Published: 23/02/2021(UTC)Updated: 08/10/2026(UTC)Translated: 09/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

2.90%

87th percentile - higher than 87% of all known CVEs

Summary

An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4. An exception is thrown from a function, but it is not caught, as demonstrated by NumberFormatException. When it is not caught, it may cause programs using the library to crash or expose sensitive information.

Risk Assessment

An application using json-smart may crash or expose sensitive data due to an unhandled exception during input processing.

Recommendation

Update json-smart to a version later than 2.4 or apply vendor-provided patches.

Other vulnerabilities in json-smart

CVE-2026-113602Medium
json-smart through 2.6.0 contains an input validation bypass vulnerability that allows attackers to evade strict-mode trailing-data checks by inserting a literal 0x1A character. Attackers can append 0x1A and malformed content to pass JSONValue.parseStrict or isValidJsonStrict validation, creating parser differentials with downstream parsers like Jackson or Gson.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS