Research

Vulnerabilities I've found in open-source code, with how they were reported and fixed.

Heap overflow in json.h when it writes back what it just read

JSONH-01 · · CWE-787, CWE-125 · Fixed upstream · no CVE assigned

The parser accepts InfinityNaN as one number. On the way back out, the pass that measures the buffer counts it as 0 bytes and the pass that fills it writes 11.