점검 대응높음KEV 미등록
CVE-2026-32874
ultrajson ultrajson, Red Hat OpenStack Platform 16.2, Red Hat OpenStack Platform 17.1 취약점
UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Versions 5.4.0 through 5.11.0 contain an accumulating memory leak in JSON parsing large (outside of the range [-2^63, 2^64 - 1]) integers. The leaked memory is a copy of the string form of the integer plus an additional NULL byte. The leak occurs irrespective of whether the integer parses successfully or is rejected due to having more than sys.get_int_max_str_digits() digits, meaning that any sized leak per malicious JSON can be achieved provided that there is no limit on the overall size of the pa...
- 대응 우선순위
- 점검
- CVSS
- 7.5
- EPSS
- 0.48% 백분위 38.8% · 2026.08.04 기준
- CISA KEV
- 미등록
- 조치 기한
- -
- 공개일
- 2026.03.20