CVE-2026-95117

Low risk· EPSS 20%

Published: 13/10/2026(UTC)Updated: 16/10/2026(UTC)Translated: 13/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

20th percentile - higher than 20% of all known CVEs

Summary

Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to cause a denial of service via the jsmn.h, jsmn_parse(), example/jsondump.c, dump() components

Risk Assessment

An attacker can crash an application that parses JSON, causing service unavailability.

Recommendation

Update jsmn to a patched version or avoid processing untrusted JSON data until updated.

Other vulnerabilities in jsmn

CVE-2026-88369High
zserge jsmn commit 25647e6 is vulnerable to Buffer Overflow in example/jsondump.c dump().

Original NVD description (English source)

Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to cause a denial of service via the jsmn.h, jsmn_parse(), example/jsondump.c, dump() components

Vulnerability data from NVD (NIST) · CISA KEV · EPSS