--- id: CVE-2020-12762 title: >- json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend. summary: >- json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend. severity: high cvss: 7.8 cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H' cwe: - CWE-190 - CWE-787 - CWE-787 vendor: json-c product: json-c affected: - json-c < 0.15-20200726 - fedora = 30 - fedora = 31 - fedora = 32 - debian_linux = 8.0 - debian_linux = 9.0 - debian_linux = 10.0 - ubuntu_linux = 12.04 - ubuntu_linux = 14.04 - ubuntu_linux = 16.04 - ubuntu_linux = 18.04 - ubuntu_linux = 19.10 - ubuntu_linux = 20.04 - sinec_ins - sinec_ins = 1.0 patched: - json-c 0.15-20200726 published: '2020-05-09' updated: '2026-10-14' sourceUpdated: '2026-10-14T10:17:26.413' source: NVD sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2020-12762' references: - url: 'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf' label: cve@mitre.org - url: 'https://github.com/json-c/json-c/pull/592' label: cve@mitre.org - url: 'https://github.com/rsyslog/libfastjson/issues/161' label: cve@mitre.org - url: 'https://lists.debian.org/debian-lts-announce/2020/05/msg00032.html' label: cve@mitre.org - url: 'https://lists.debian.org/debian-lts-announce/2020/05/msg00034.html' label: cve@mitre.org - url: 'https://lists.debian.org/debian-lts-announce/2020/07/msg00031.html' label: cve@mitre.org - url: 'https://lists.debian.org/debian-lts-announce/2023/06/msg00023.html' label: cve@mitre.org - url: >- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CBR36IXYBHITAZFB5PFBJTED22WO5ONB/ label: cve@mitre.org - url: >- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CQQRRGBQCAWNCCJ2HN3W5SSCZ4QGMXQI/ label: cve@mitre.org - url: >- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W226TSCJBEOXDUFVKNWNH7ETG7AR6MCS/ label: cve@mitre.org - url: 'https://security.gentoo.org/glsa/202006-13' label: cve@mitre.org - url: 'https://security.netapp.com/advisory/ntap-20210521-0001/' label: cve@mitre.org - url: 'https://usn.ubuntu.com/4360-1/' label: cve@mitre.org - url: 'https://usn.ubuntu.com/4360-4/' label: cve@mitre.org - url: 'https://www.debian.org/security/2020/dsa-4741' label: cve@mitre.org - url: 'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://github.com/json-c/json-c/pull/592' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://github.com/rsyslog/libfastjson/issues/161' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://lists.debian.org/debian-lts-announce/2020/05/msg00032.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://lists.debian.org/debian-lts-announce/2020/05/msg00034.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://lists.debian.org/debian-lts-announce/2020/07/msg00031.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://lists.debian.org/debian-lts-announce/2023/06/msg00023.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://lists.debian.org/debian-lts-announce/2025/07/msg00021.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: >- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CBR36IXYBHITAZFB5PFBJTED22WO5ONB/ label: af854a3a-2127-422b-91ae-364da2661108 - url: >- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CQQRRGBQCAWNCCJ2HN3W5SSCZ4QGMXQI/ label: af854a3a-2127-422b-91ae-364da2661108 - url: >- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W226TSCJBEOXDUFVKNWNH7ETG7AR6MCS/ label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://security.gentoo.org/glsa/202006-13' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://security.netapp.com/advisory/ntap-20210521-0001/' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://usn.ubuntu.com/4360-1/' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://usn.ubuntu.com/4360-4/' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://www.debian.org/security/2020/dsa-4741' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://cert-portal.siemens.com/productcert/html/ssa-202008.html' label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e - url: 'https://cert-portal.siemens.com/productcert/html/ssa-398330.html' label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e - url: 'https://cert-portal.siemens.com/productcert/html/ssa-637483.html' label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e - url: 'https://cert-portal.siemens.com/productcert/html/ssa-794697.html' label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e tags: - nvd epss: 0.01895 epssPercentile: 0.79094 ingestedAt: '2026-10-14T10:25:41.173Z' --- ## Overview json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend. ## Affected - `json-c < 0.15-20200726` - `fedora = 30` - `fedora = 31` - `fedora = 32` - `debian_linux = 8.0` - `debian_linux = 9.0` - `debian_linux = 10.0` - `ubuntu_linux = 12.04` - `ubuntu_linux = 14.04` - `ubuntu_linux = 16.04` - `ubuntu_linux = 18.04` - `ubuntu_linux = 19.10` - `ubuntu_linux = 20.04` - `sinec_ins` - `sinec_ins = 1.0` ## Remediation Upgrade past the affected range: - `json-c 0.15-20200726`