CVE Catalog

CVE-2026-88369

HighCVSS 7.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.24%

13th percentile - higher than 13% of all known CVEs

Summary

zserge jsmn commit 25647e6 is vulnerable to Buffer Overflow in example/jsondump.c dump().

Risk Assessment

Exploitation may lead to a buffer overflow, potentially enabling memory corruption or arbitrary code execution in the context of the application processing JSON data. This poses a serious threat to confidentiality, integrity, and availability.

Recommendation

Update jsmn to a version containing the fix, or avoid using the example code example/jsondump.c in production. If necessary, add input length validation before calling the dump() function.

Other vulnerabilities in jsmn

Original NVD description (English source)

zserge jsmn commit 25647e6 is vulnerable to Buffer Overflow in example/jsondump.c dump().

Vulnerability data from NVD (NIST) · CISA KEV · EPSS