This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2026-95117 →

DEBIAN-CVE-2026-95117

Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to cause a denial of service via the jsmn.h, jsmn_parse(), exa...

Original description

The description as published by the source.

Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to cause a denial of service via the jsmn.h, jsmn_parse(), example/jsondump.c, dump() components

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 jsmn

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 jsmn

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 jsmn

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

References

advisory security-tracker.debian.org