CVE-2024-31755: Null Pointer Dereference
cJSON v1.7.17 was discovered to contain a segmentation violation which can trigger through the second parameter of function cJSONSetValuestring at cJSON.c.
Other sources
cJSON v1.7.17 was discovered to contain a segmentation violation, which can trigger through the second parameter of function cJSONSetValuestring at cJSON.c.
— Ubuntu
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-31755?
CVE-2024-31755 has been classified as a high-severity vulnerability due to the potential for remote code execution resulting from a segmentation violation.
How do I fix CVE-2024-31755?
To mitigate CVE-2024-31755, users should upgrade to cJSON version 1.7.18 or later, or any patched version provided by their operating system vendor.
What software is affected by CVE-2024-31755?
CVE-2024-31755 affects cJSON version 1.7.17 and earlier versions across various distributions, including Ubuntu and Debian.
What are the potential consequences of CVE-2024-31755?
Exploitation of CVE-2024-31755 could lead to denial of service and potentially allow attackers to execute arbitrary code on affected systems.
Is there any workaround for CVE-2024-31755?
Currently, the best course of action for CVE-2024-31755 is to apply the available software updates as no reliable workarounds have been reported.