{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3atencentrapidjson/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:tencent:rapidjson:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.3,"id":"CVE-2026-116620"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["RapidJSON (\u003c= 1.1.0)"],"_cs_severities":["high"],"_cs_tags":["vulnerability","rapidjson"],"_cs_type":"advisory","_cs_vendors":["Tencent"],"content_html":"\u003cp\u003eA security vulnerability has been detected in Tencent RapidJSON up to 1.1.0. The issue affects the function \u003ccode\u003eGenericStringStream\u0026lt;UTF8\u0026lt;char\u0026gt;\u0026gt;::Take\u003c/code\u003e in the file \u003ccode\u003einclude/rapidjson/stream.h\u003c/code\u003e of the component Regex Parser. The manipulation leads to an out-of-bounds read and can be initiated remotely. The exploit has been disclosed publicly. The project was informed of the problem but has not responded.\u003c/p\u003e\n","date_modified":"2026-10-27T01:52:21Z","date_published":"2026-10-27T01:52:21Z","id":"https://feed.craftedsignal.io/briefs/2026-10-rapidjson-oob-read/","summary":"Tencent RapidJSON versions up to 1.1.0 contain an out-of-bounds read vulnerability in the GenericStringStream function within the Regex Parser component.","title":"RapidJSON: Out-of-bounds read in Regex Parser (CVE-2026-116620)","url":"https://feed.craftedsignal.io/briefs/2026-10-rapidjson-oob-read/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:tencent:rapidjson:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}