{"id":"OSV-2024-1322","summary":"Security exception in com.alibaba.fastjson2.JSONReader.readObject","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=379180973\n\n```\nCrash type: Security exception\nCrash state:\ncom.alibaba.fastjson2.JSONReader.readObject\njava.base/java.nio.charset.CharsetEncoder.replaceWith\njava.base/java.nio.charset.CharsetEncoder.\u003cinit\u003e\n```\n","modified":"2025-03-18T00:24:17.881614Z","published":"2024-11-18T00:00:16.618504Z","references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=379180973"}],"affected":[{"package":{"name":"fastjson2","ecosystem":"OSS-Fuzz","purl":"pkg:generic/fastjson2"},"ranges":[{"type":"GIT","repo":"https://github.com/alibaba/fastjson2","events":[{"introduced":"87cb869a138c8ae36108026b8caadb70f62ef55a"},{"fixed":"e6ff30a96ba22cae7df224dfaf1182daa89ad4c0"}]}],"versions":["2.0.30","2.0.31","2.0.32","2.0.33","2.0.34.1.android4","2.0.34.android4","2.0.35","2.0.35.android4","2.0.36","2.0.36.android4","2.0.37","2.0.37.android4","2.0.38.android4","2.0.39","2.0.39.android4","2.0.40","2.0.40.android4","2.0.41","2.0.41.android4","2.0.42","2.0.42.android","2.0.43","2.0.43.android4","2.0.44","2.0.44.android","2.0.45","2.0.45.android4","2.0.46","2.0.46.android4","2.0.46.android5","2.0.46.android8","2.0.47","2.0.47.android5","2.0.47.android8","2.0.48","2.0.48.android5","2.0.48.anroid8","2.0.49","2.0.49.android5","2.0.49.android8","2.0.50","2.0.50.android4","2.0.50.android8","2.0.51","2.0.51.android5","2.0.51.android8","2.0.52","2.0.52.android5","2.0.52.android8","2.0.53","2.0.53.android5","2.0.53.android8","2.0.54.android5","2.0.54.android8","2.0.55.android5","2.0.55.android8","2.0.56.android5","2.0.56.android8"],"ecosystem_specific":{"severity":"LOW"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/fastjson2/OSV-2024-1322.yaml","introduced_range":"d586134f2f681c7b435b6ad5d9e1d90c3dee7e0a:d7025411289dff4412ef6ed81e7890954ac5cd7e"}}],"schema_version":"1.7.3"}