{"id":"CVE-2020-12762","state":"PUBLISHED","title":"json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.","description":"json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.","publishedAt":"2020-05-09T00:00:00.000Z","updatedAt":"2026-10-14T09:06:59.467Z","severity":{"score":7.8,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","source":"CISA-ADP"},"assigner":"mitre","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["https://github.com/json-c/json-c/pull/592","https://github.com/rsyslog/libfastjson/issues/161","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CQQRRGBQCAWNCCJ2HN3W5SSCZ4QGMXQI/","https://usn.ubuntu.com/4360-1/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CBR36IXYBHITAZFB5PFBJTED22WO5ONB/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W226TSCJBEOXDUFVKNWNH7ETG7AR6MCS/","https://lists.debian.org/debian-lts-announce/2020/05/msg00032.html","https://lists.debian.org/debian-lts-announce/2020/05/msg00034.html","https://usn.ubuntu.com/4360-4/","https://security.gentoo.org/glsa/202006-13","https://lists.debian.org/debian-lts-announce/2020/07/msg00031.html","https://www.debian.org/security/2020/dsa-4741","https://security.netapp.com/advisory/ntap-20210521-0001/","https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf","https://lists.debian.org/debian-lts-announce/2023/06/msg00023.html","https://lists.debian.org/debian-lts-announce/2025/07/msg00021.html","https://cert-portal.siemens.com/productcert/html/ssa-637483.html","https://cert-portal.siemens.com/productcert/html/ssa-794697.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-202008.html"],"weaknesses":["CWE-787"],"ingestedAt":"2026-10-29T19:46:27.697Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2020/12xxx/CVE-2020-12762.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2020-12762","state":"PUBLISHED","datePublished":"2020-05-09T00:00:00.000Z","dateUpdated":"2026-10-14T09:06:59.467Z","assignerShortName":"mitre","assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateReserved":"2020-05-09T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"https://github.com/json-c/json-c/pull/592"},{"url":"https://github.com/rsyslog/libfastjson/issues/161"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CQQRRGBQCAWNCCJ2HN3W5SSCZ4QGMXQI/","name":"FEDORA-2020-63c6f4ab1d","tags":["vendor-advisory"]},{"url":"https://usn.ubuntu.com/4360-1/","name":"USN-4360-1","tags":["vendor-advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CBR36IXYBHITAZFB5PFBJTED22WO5ONB/","name":"FEDORA-2020-847ad856ab","tags":["vendor-advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W226TSCJBEOXDUFVKNWNH7ETG7AR6MCS/","name":"FEDORA-2020-7eb7eac270","tags":["vendor-advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/05/msg00032.html","name":"[debian-lts-announce] 20200531 [SECURITY] [DLA 2228-1] json-c security update","tags":["mailing-list"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/05/msg00034.html","name":"[debian-lts-announce] 20200531 [SECURITY] [DLA 2228-2] json-c regression update","tags":["mailing-list"]},{"url":"https://usn.ubuntu.com/4360-4/","name":"USN-4360-4","tags":["vendor-advisory"]},{"url":"https://security.gentoo.org/glsa/202006-13","name":"GLSA-202006-13","tags":["vendor-advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/07/msg00031.html","name":"[debian-lts-announce] 20200730 [SECURITY] [DLA 2301-1] json-c security update","tags":["mailing-list"]},{"url":"https://www.debian.org/security/2020/dsa-4741","name":"DSA-4741","tags":["vendor-advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20210521-0001/"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf"},{"url":"https://lists.debian.org/debian-lts-announce/2023/06/msg00023.html","name":"[debian-lts-announce] 20230620 [SECURITY] [DLA 3461-1] libfastjson security update","tags":["mailing-list"]}],"problemTypes":[{"descriptions":[{"type":"text","lang":"en","description":"n/a"}]}],"providerMetadata":{"shortName":"mitre","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateUpdated":"2023-06-20T00:00:00.000Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://github.com/json-c/json-c/pull/592","tags":["x_transferred"]},{"url":"https://github.com/rsyslog/libfastjson/issues/161","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CQQRRGBQCAWNCCJ2HN3W5SSCZ4QGMXQI/","name":"FEDORA-2020-63c6f4ab1d","tags":["vendor-advisory","x_transferred"]},{"url":"https://usn.ubuntu.com/4360-1/","name":"USN-4360-1","tags":["vendor-advisory","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CBR36IXYBHITAZFB5PFBJTED22WO5ONB/","name":"FEDORA-2020-847ad856ab","tags":["vendor-advisory","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W226TSCJBEOXDUFVKNWNH7ETG7AR6MCS/","name":"FEDORA-2020-7eb7eac270","tags":["vendor-advisory","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/05/msg00032.html","name":"[debian-lts-announce] 20200531 [SECURITY] [DLA 2228-1] json-c security update","tags":["mailing-list","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/05/msg00034.html","name":"[debian-lts-announce] 20200531 [SECURITY] [DLA 2228-2] json-c regression update","tags":["mailing-list","x_transferred"]},{"url":"https://usn.ubuntu.com/4360-4/","name":"USN-4360-4","tags":["vendor-advisory","x_transferred"]},{"url":"https://security.gentoo.org/glsa/202006-13","name":"GLSA-202006-13","tags":["vendor-advisory","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/07/msg00031.html","name":"[debian-lts-announce] 20200730 [SECURITY] [DLA 2301-1] json-c security update","tags":["mailing-list","x_transferred"]},{"url":"https://www.debian.org/security/2020/dsa-4741","name":"DSA-4741","tags":["vendor-advisory","x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20210521-0001/","tags":["x_transferred"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/06/msg00023.html","name":"[debian-lts-announce] 20230620 [SECURITY] [DLA 3461-1] libfastjson security update","tags":["mailing-list","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/07/msg00021.html"}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2025-11-03T19:25:29.557Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"timestamp":"2025-05-30T19:18:06.259819Z","id":"CVE-2020-12762","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-787","type":"CWE","lang":"en","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-05-30T19:47:52.321Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","status":"affected","lessThan":"V3.1.5","versionType":"custom"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","status":"affected","lessThan":"V3.1.5","versionType":"custom"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","status":"affected","lessThan":"V3.1.5","versionType":"custom"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","status":"affected","lessThan":"V3.1.5","versionType":"custom"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V1.1","versionType":"custom"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","status":"affected","lessThan":"V3.1.5","versionType":"custom"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX MX5000","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V2.17.0","versionType":"custom"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX MX5000RE","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V2.17.0","versionType":"custom"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1400","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V2.17.0","versionType":"custom"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1500","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V2.17.0","versionType":"custom"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1501","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V2.17.0","versionType":"custom"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1510","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V2.17.0","versionType":"custom"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1511","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V2.17.0","versionType":"custom"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1512","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V2.17.0","versionType":"custom"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1524","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V2.17.0","versionType":"custom"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1536","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V2.17.0","versionType":"custom"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX5000","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V2.17.0","versionType":"custom"}]}],"references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-637483.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-202008.html"}],"providerMetadata":{"shortName":"siemens-SADP","orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","dateUpdated":"2026-10-14T09:06:59.467Z"},"x_adpType":"supplier"}]}}}