Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

ibireme/yyjson

              master @ 92ae1e2
            

Fixes

CVEs

HIGH

Peak severity

Highlights

Heap-based Buffer Overflow: 1 prior fix. Scrutinize any change in this area.

src/yyjson.h: most-fixed (2 issues). Treat as high-risk during review.

1 high-severity fix in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Heap-based Buffer Overflow: An integer overflow in size calculations during string allocation (`unsafe_yyjson_mut_str_alc`) can result in a smaller-than-expected heap buffer being allocated, leading to a heap-based buffer overflow when data is copied via `memcpy`.

Integer Overflow: Inadequate range validation checks in `yyjson_mut_arr_remove_range` allow integer overflows to bypass bounds validation, potentially causing incorrect array size adjustments and subsequent out-of-bounds operations.