CVE-2026-82803

MEDIUM 5.3

armink struct2json JSON Deserialization s2jdef.h S2J_STRUCT_GET_string_ELEMENT null pointer dereference

CVSS Score

5.3

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability has been found in armink struct2json 1.0. This affects the function S2J_STRUCT_GET_string_ELEMENT in the library struct2json/inc/s2jdef.h of the component JSON Deserialization. The manipulation of the argument valuestring leads to null pointer dereference. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CWE	CWE-476 CWE-404
Vendor	armink
Product	struct2json
Published	Aug 31, 2026

Stay Ahead of the Next One

Get instant alerts for armink struct2json

Be the first to know when new medium vulnerabilities affecting armink struct2json are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

armink / struct2json

1.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/397224 vuldb.com: https://vuldb.com/vuln/397224/cti vuldb.com: https://vuldb.com/cve/CVE-2026-82803 vuldb.com: https://vuldb.com/submit/858192 github.com: https://github.com/fa1c4/security-advisories/tree/main/struct2json github.com: https://github.com/fa1c4/security-advisories/tree/main/struct2json/PoC

Credits

🔍 fa1c4 (VulDB User) VulDB CNA Team