CVE-2021-31875: Buffer Overflow
DISPUTED In mjsjson.c in Cesanta MongooseOS mJS 1.26, a maliciously formed JSON string can trigger an off-by-one heap-based buffer overflow in mjsjsonparse, which can potentially lead to redirection of control flow. NOTE: the original reporter disputes the significance of this finding because "there isn’t very much of an opportunity to exploit this reliably for an information leak, so there isn’t any real security impact."
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2021-31875?
The severity of CVE-2021-31875 is disputed, but it involves a potential off-by-one heap-based buffer overflow.
How do I fix CVE-2021-31875?
To fix CVE-2021-31875, update Cesanta MongooseOS mJS to version 1.27 or later.
What software is affected by CVE-2021-31875?
CVE-2021-31875 affects Cesanta MongooseOS mJS version 1.26.
What type of vulnerability is CVE-2021-31875?
CVE-2021-31875 is classified as a buffer overflow vulnerability.
Can CVE-2021-31875 allow control flow redirection?
Yes, CVE-2021-31875 can potentially lead to redirection of control flow if exploited.