OSV-2026-1429

See a problem?

Import Source

https://github.com/google/oss-fuzz-vulns/blob/main/vulns/json/OSV-2026-1429.yaml

JSON Data

https://api.osv.dev/v1/vulns/OSV-2026-1429

Published

2026-10-22T00:15:07Z

Modified

2026-10-24T16:15:03Z

Summary

Use-of-uninitialized-value in nlohmann::json_abi_v3_12_0::detail::binary_reader<nlohmann::json_abi_v3_12_0::ba

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=575915982

Crash type: Use-of-uninitialized-value
Crash state:
nlohmann::json_abi_v3_12_0::detail::binary_reader<nlohmann::json_abi_v3_12_0::ba
nlohmann::json_abi_v3_12_0::detail::binary_reader<nlohmann::json_abi_v3_12_0::ba
nlohmann::json_abi_v3_12_0::basic_json<std::__1::map, std::__1::vector, std::__1

References

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=575915982

Affected packages

OSS-Fuzz / json

Package

Name: json
Purl: pkg:generic/json

Affected ranges

Type: GIT
Repo: https://github.com/nlohmann/json.git
Events: Introduced

cc8334113c8672433bf2d656ef60d14cd57867c4

Fixed

08d7fbb0a1ae77b612ee0f4c839ddbe2462f6127

Fixed

2dc1e548563823ff103a383894b735c51963db76

Ecosystem specific

{
    "severity":  "MEDIUM"
}

Database specific

fixed_range

"a55cae45fd0333738be2c38c5adcec50a2f22729:2dc1e548563823ff103a383894b735c51963db76"

introduced_range

"0e95fe8200adbf0e033d0c0818eea473e1d4d346:4da932f518feb262d29b08aedec10ec0c45fa501"

source

"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/json/OSV-2026-1429.yaml"