CyberRota Analysis
AI-GeneratedA vulnerability in the JSON parser of marcobambini Gravity versions up to 0.9.7 allows for remote memory corruption, potentially leading to exploitation. Organizations using this software should prioritize upgrading to version 0.9.8 to mitigate the risk, as public exploit code is available. This issue is particularly relevant for developers and system administrators managing applications that rely on the affected component.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A weakness has been identified in marcobambini Gravity up to 0.9.7. The impacted element is an unknown function of the file src/utils/gravity_json.c of the component JSON parser. This manipulation causes memory corruption. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 0.9.8 is sufficient to resolve this issue. Patch name: 9b337c3eae5833c3956bed1fc01c21c14fd443f2. It is suggested to upgrade the affected component.