CVE-2026-88358: Simdjson simdjson vulnerability
simdjson 4.6.1 contains a one-byte out-of-bounds read vulnerability in dom::parser::parseunpadded(). A specially crafted truncated JSON document whose final structural token closes a nested array or object can cause jsoniterator::walkdocument() to access buf[len] after the input buffer has been exhausted. This results in a heap out-of-bounds read and may cause application termination, leading to denial of service.
Affected Software
Event History
Frequently Asked Questions
Which applications are exposed to this issue?
Applications are exposed if they use simdjson 4.6.1 and pass attacker-influenced JSON to dom::parser::parse_unpadded(). The affected condition occurs while parsing a truncated document whose final structural token closes a nested array or object.
What can an attacker achieve?
An attacker can trigger a one-byte heap out-of-bounds read after the input buffer is exhausted. The documented impact is application termination, resulting in denial of service.