Stack-Based Buffer Overflow in UltraJSON Library

CVE-2021-45958

What is CVE-2021-45958?

The UltraJSON library, also known as ujson, is susceptible to a stack-based buffer overflow involving the Buffer_AppendIndentUnchecked function, which is invoked during encoding processes. Attackers can exploit this vulnerability by providing overly large indentation values, potentially leading to memory corruption and execution of arbitrary code. It is crucial for users of UltraJSON versions 5.1.0 and earlier to apply the relevant security updates to mitigate associated risks.

References