azure linux libglvnd vulnerabilities

Latest azure linux libglvnd CVEs

Newest publication first

1. CVE-2026-67215 cJSON JSON Patch copy/add Uncontrolled Recursion Stack Exhaustion

   Published 2026-07-29

   High·CVSS 8.7 EPSS 0.70%

   cJSON through 1.7.19 is vulnerable to uncontrolled recursion leading to stack exhaustion when an untrusted RFC 6902 JSON Patch is applied via cJSONUtils_ApplyPatches() or cJSONUtils_ApplyPatchesCaseSensitive(). A patch containing add and copy operations grafts duplicated subtrees...

2. CVE-2026-16554 Integer Overflow Leading to Heap Buffer Overflow in cJSON

   Published 2026-07-27

   Medium·CVSS 5.1 EPSS 0.37%

   cJSON library is vulnerable to an integer overflow in the print_string_ptr() function in cJSON.c on 32-bit platforms. The escape_characters counter, a 32-bit size_t, can wrap around when processing strings containing approximately 858,993,460 or more control characters, causing t...

3. CVE-2023-26819 cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {"a": true, "b": [ null,9999999999999999999999999999999999999999999999912345678901234567]}.

   Published 2025-04-19

   Low·CVSS 2.9 EPSS 0.24%

   cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {"a": true, "b": [ null,9999999999999999999999999999999999999999999999912345678901234567]}.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.