What is CVE-2026-16554?
CVE-2026-16554 is an integer overflow vulnerability in the print_string_ptr() function of the cJSON library on 32-bit platforms. Processing strings with a large number of control characters can cause a counter wrap-around, leading to a miscalculated output buffer size. Updating the library to the latest patched version is strongly recommended.
Azərbaycanca: CVE-2026-16554 cJSON kitabxanasının print_string_ptr() funksiyasında 32-bit platformalarda tam ədəd daşması (integer overflow) zəifliyidir. Bu, xüsusi hazırlanmış çox sayda idarəedici simvol olan stringlər emal edilərkən output buffer-in səhv hesablanmasına səbəb ola bilər. Kitabxananı ən son versiyaya yeniləmək tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-190
FAQ2
On which platforms does CVE-2026-16554 affect the cJSON library?
CVE-2026-16554 is an integer overflow vulnerability in the print_string_ptr() function of the cJSON library on 32-bit platforms.
What is the recommended mitigation for CVE-2026-16554?
Updating the library to the latest patched version is strongly recommended.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.