VDB

MAGEIA-2022-270

MAGEIA-2022-270 PUBLISHED

Add support for arbitrary size integers. Replace 'wchar_t' string decoding implementation with a 'uint32_t'-based one; fix handling of surrogates on decoding (CVE-2022-31116) Potential double free of buffer during string decoding - Fix memory leak on encoding errors when the buffer was resized - Integer parsing: always detect overflows - Fix handling of surrogates on encoding (CVE-2022-31117)

Affected Products

VendorProductVersions
Mageiapython-ujson0, 5.4.0-1.mga8

Timeline

  • Jul 29, 2022 CVE Updated
  • Jul 29, 2022 CVE Published
Open in Interactive Console →
$ Console Community · 100/wk Open console ›