yocto ▾
›
kirkstone ▾
›
vulnerability
›
CVE-2020-12762
Component Overview
Vulnerability Overview
Name
CVE-2020-12762
Source
NVD (
link
)
Debian (
link
)
Description
json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.
CWEs
CWE-190
CWE-787
Published Date
May 9, 2020
Updated Date
Jun 17, 2026
Workaround
-
Advisories
https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf
Third Party Advisory
https://github.com/json-c/json-c/pull/592
Exploit
https://github.com/rsyslog/libfastjson/issues/161
Exploit
https://lists.debian.org/debian-lts-announce/2020/05/msg00032.html
Mailing List
https://lists.debian.org/debian-lts-announce/2020/05/msg00034.html
Mailing List
https://lists.debian.org/debian-lts-announce/2020/07/msg00031.html
Mailing List
https://lists.debian.org/debian-lts-announce/2023/06/msg00023.html
Third Party Advisory
https://security.gentoo.org/glsa/202006-13
Third Party Advisory
https://security.netapp.com/advisory/ntap-20210521-0001/
Third Party Advisory
https://usn.ubuntu.com/4360-1/
Third Party Advisory
https://usn.ubuntu.com/4360-4/
Third Party Advisory
https://www.debian.org/security/2020/dsa-4741
Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf
Third Party Advisory
https://github.com/json-c/json-c/pull/592
Exploit
https://github.com/rsyslog/libfastjson/issues/161
Exploit
https://lists.debian.org/debian-lts-announce/2020/05/msg00032.html
Mailing List
https://lists.debian.org/debian-lts-announce/2020/05/msg00034.html
Mailing List
https://lists.debian.org/debian-lts-announce/2020/07/msg00031.html
Mailing List
https://lists.debian.org/debian-lts-announce/2023/06/msg00023.html
Third Party Advisory
https://security.gentoo.org/glsa/202006-13
Third Party Advisory
https://security.netapp.com/advisory/ntap-20210521-0001/
Third Party Advisory
https://usn.ubuntu.com/4360-1/
Third Party Advisory
https://usn.ubuntu.com/4360-4/
Third Party Advisory
https://www.debian.org/security/2020/dsa-4741
Third Party Advisory
Analysis
#
Affected Component
Analysis
json-c
Exploitable
Vulnerability Ratings
#
7.8
CVSSv31
7.8
CVSSv31
6.8
CVSSv2
NaN
other
Others affected components
#
Name
Project
Project Version
Version
Status
json-c
buildroot
2025.02.x
0.18
Not Affected
json-c
buildroot
master
0.18
Not Affected
libjson-c
openwrt
master
0.18-r1
Not Affected
libjson-c
openwrt
openwrt-25.12
0.18-r1
Not Affected
json-c
yocto
master
0.18
Not Affected
json-c
yocto
scarthgap
0.17
Not Affected