CVE-2018-20579

HIGH

Contiki-NG < 4.2 - Stack-Based Buffer Overflow in JSON Parser

Title source: llm

Description

Contiki-NG before 4.2 has a stack-based buffer overflow in the push function in os/lib/json/jsonparse.c that allows an out-of-bounds write of an '{' or '[' character.

References (1)

Core 1

Core References

Mitigation, Third Party Advisory x_refsource_misc

https://github.com/contiki-ng/contiki-ng/issues/601

Scores

CVSS v3 7.1

EPSS 0.0032

EPSS Percentile 24.0%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Details

CWE

CWE-787

Status published

Products (1)

contiki-ng_project/contiki-ng 4.2

Published Dec 28, 2018

Tracked Since Feb 18, 2026