CVE-2025-57052

ADVISORY - nist

Summary

cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.c, allowing remote attackers to bypass array bounds checking and access restricted data via malformed JSON pointer strings containing alphanumeric characters.

EPSS Score⁠: 0.00693 (0.485)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-125⁠

Out-of-bounds Read

CWE-129⁠

Improper Validation of Array Index

ADVISORY - redhat

CWE-129⁠

Improper Validation of Array Index

Impacted images

Advisories

NIST

CREATED

10 months ago

UPDATED

8 months ago

ADVISORY IDCVE-2025-57052⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-125⁠CWE-129⁠

CVSS SCORE

9.8critical

Alpine

CREATED

9 months ago

UPDATED

20 days ago

ADVISORY IDCVE-2025-57052⁠

EXPLOITABILITY SCORE

-

EXPLOITS FOUND

-

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Debian

CREATED

10 months ago

UPDATED

2 months ago

ADVISORY IDCVE-2025-57052⁠

EXPLOITABILITY SCORE

-

EXPLOITS FOUND

-

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Ubuntu

CREATED

10 months ago

UPDATED

6 months ago

ADVISORY IDCVE-2025-57052⁠

EXPLOITABILITY SCORE

-

EXPLOITS FOUND

-

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Red Hat

CREATED

10 months ago

UPDATED

6 months ago

ADVISORY IDCVE-2025-57052⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

-

COMMON WEAKNESS ENUMERATION (CWE)

CVSS SCORE

7.5high