CVE-2026-82803
Received Received - Intake

Null Pointer Dereference in struct2json JSON Deserialization

Publication date: 2026-08-31

Last updated on: 2026-08-31

Assigner: VulDB

Description
A vulnerability has been found in armink struct2json 1.0. This affects the function S2J_STRUCT_GET_string_ELEMENT in the library struct2json/inc/s2jdef.h of the component JSON Deserialization. The manipulation of the argument valuestring leads to null pointer dereference. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-31
Last Modified
2026-08-31
Generated
2026-08-31
AI Q&A
2026-08-31
EPSS Evaluated
N/A
NVD
CVE-2026-82803
EUVD
EUVD-2026-68611

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
armink struct2json 1.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-476 The product dereferences a pointer that it expects to be valid but is NULL.
CWE-404 The product does not release or incorrectly releases a resource before it is made available for re-use.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-82803 is a NULL pointer dereference vulnerability in the struct2json library. It occurs in the S2J_STRUCT_GET_string_ELEMENT function when processing JSON input. If a non-string value like a number is assigned to a field expected to be a string, the code crashes due to dereferencing a NULL pointer. The issue stems from copying json_temp->valuestring without checking if the cJSON node is actually a string type.

Detection Guidance

To detect CVE-2026-82803, test the struct2json library with JSON input containing non-string values in string fields. Use a command like: echo '{"nAMe": 2}' | ./your_application_using_struct2json. If the application crashes with a null pointer dereference error, the vulnerability is likely present.

Impact Analysis

This vulnerability can cause application crashes when processing malformed JSON input. An attacker could exploit it remotely by sending crafted JSON data, leading to denial-of-service conditions. Systems using struct2json for JSON deserialization may become unstable or unresponsive.

Mitigation Strategies

Immediately update the struct2json library to a patched version if available. If no patch exists, modify your application to validate JSON input types before processing. Avoid using struct2json for untrusted JSON data until a fix is applied.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-82803. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart