CVE Catalog
CVE-2026-88369
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk0.24%
13th percentile - higher than 13% of all known CVEs
Summary
zserge jsmn commit 25647e6 is vulnerable to Buffer Overflow in example/jsondump.c dump().
Risk Assessment
Exploitation may lead to a buffer overflow, potentially enabling memory corruption or arbitrary code execution in the context of the application processing JSON data. This poses a serious threat to confidentiality, integrity, and availability.
Recommendation
Update jsmn to a version containing the fix, or avoid using the example code example/jsondump.c in production. If necessary, add input length validation before calling the dump() function.
Other vulnerabilities in jsmn
Original NVD description (English source)
zserge jsmn commit 25647e6 is vulnerable to Buffer Overflow in example/jsondump.c dump().
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

