CVE-2023-30421
CVSS 3.1 Score 2.9 of 10 (low)
Details
Published Apr 19, 2025
Updated: Apr 21, 2025
CWE ID 407
Summary
CVE-2023-30421 is a vulnerability affecting the mystrtod function in mjson version 1.2.7. This issue arises when processing certain digit strings, such as "8891110122900e913013935755114". The vulnerability requires more than a billion iterations during processing, posing a significant computational burden and potential denial-of-service risk. Attackers may exploit this weakness to cause targeted systems to crash or become unresponsive. It is recommended that users upgrade to a patched version of mjson as soon as possible to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.