CVE-2010-1666: Dan Pascu Python-Cjson

Medium severity, CVSS 6.8. EPSS: 1.7% chance of exploitation in the next 30 days.

Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows context-dependent attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors involving crafted Unicode input to the cjson.encode function.

Affected products

• Dan Pascu Python-Cjson: version 1.0.5 only

Published 2010-07-02. Last modified 2026-06-16.