CVE-2026-95117

EUVD-2026-98807
Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to cause a denial of service via the jsmn.h, jsmn_parse(), example/jsondump.c, dump() components
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
UNKNOWN
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 19.82%
Debian logo
Debian Releases
Debian Product
Codename
jsmn
bookworm
vulnerable
forky
vulnerable
sid
vulnerable
trixie
vulnerable
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
jsmn
jammy
needs-triage
noble
needs-triage
resolute
needs-triage
References
https://gist.github.com/1820893135-pixel/905399dd927376f7d655e6b01067fd8e
https://github.com/zserge/jsmn/issues/249
https://github.com/zserge/jsmn/pull/250
https://github.com/zserge/jsmn/pull/250/changes/320e3348d22a819be95b755af39cd35097707ad0