Vendor
A publicly exploitable use-after-free vulnerability in the cJSONUtils_MergePatch function of the DaveGamble cJSON library allows for potential remote code execution or application crashes.