GCVE-110-MAGEIA-2026-73 — Vulnetix

GCVE-110-MAGEIA-2026-73

Advisory Published

Vulnetix · Advisory published March 29, 2026

CVE-2026-32874 ujson 5.4.0 to 5.11.0 inclusive contains an accumulating memory leak in JSON parsing large (outside of the range [-2^63, 2^64 - 1]) integers. ujson 5.4.0 to 5.11.0 has an integer overflow while handling a large indent which leads to a buffer overflow or infinite loop.

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	python-ujson	5.7.0-1.1.mga9 (unaffected), 0 (affected)	—

Aliases

CVE-2026-32874 CVE-2026-32875

References

Updated python-ujson packages fix security vulnerabilities

advisory

Updated python-ujson packages fix security vulnerabilities

issue

Updated python-ujson packages fix security vulnerabilities

issue

Updated python-ujson packages fix security vulnerabilities

issue

Browse GCVE Records

72,664 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON

$ Console Community · 100/wk Open console ›