CVE-2026-95117

Severity not reported

Data quality: partial. Some fields were not provided by the source.

Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to cause a denial of service via the jsmn.h, jsmn_parse(), example/json…

Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to cause a denial of service via the jsmn.h, jsmn_parse(), example/jsondump.c, dump() components

CVSS

—

Not reported by the source

Timeline (UTC)

Published: 2026-10-13 15:17

Modified: 2026-10-16 19:56

NVD status: Deferred

Last synced 1 day ago

Verified against the source API 2026-10-27 06:59 UTC

Exploitation

Not listed in CISA KEV (as of last catalog sync)

Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).

Affected products

Not reported by the source (unknown — not "none").

Mitigation & advisories

No vendor advisory or patch reference tagged by NVD. Check the references below.

References

https://gist.github.com/1820893135-pixel/905399dd927376f7d655e6b01067fd8e cve@mitre.org
https://github.com/zserge/jsmn/issues/249 cve@mitre.org
https://github.com/zserge/jsmn/pull/250 cve@mitre.org
https://github.com/zserge/jsmn/pull/250/changes/320e3348d22a819be95b755af39cd35097707ad0 cve@mitre.org

Data sources

NVD CVE API 2.0 — fetched 2026-10-27 06:59 UTC · record ↗

Learn the basics

Understanding CVEs and CVSS Scores