UBUNTU-CVE-2026-120194: High severity ubuntu/json-glib vulnerability
A flaw was found in json-glib. The JSONPath slice evaluator used by jsonpathquery() can enter an infinite loop when given a slice expression with a negative step. An application that evaluates attacker-controlled JSONPath expressions can be forced into a hang, leading to a denial of service.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this denial-of-service issue?
Applications using json-glib are exposed if they evaluate JSONPath expressions supplied or controlled by an attacker. The affected behavior is in the JSONPath slice evaluator used by json_path_query().
What does an attacker need to trigger the issue?
An attacker needs to provide a JSONPath slice expression with a negative step to an application that passes it to json_path_query(). No privileges or user interaction are required according to the supplied severity vector.
What is the impact of successful exploitation?
The negative-step slice expression can cause an infinite loop, forcing the affected application to hang. This results in denial of service; the provided vector indicates no confidentiality or integrity impact.