CVE-2026-116620 | Tencent RapidJSON up to 1.1.0 Regex Parser stream.h Take out-of-bounds (Issue 2401)

SecurityVulns
Yanac

A vulnerability classified as critical has been found in Tencent RapidJSON up to 1.1.0. This issue affects the function GenericStringStream<UTF8<char>>::Take in the library include/rapidjson/stream.h of the component Regex Parser. The manipulation leads to out-of-bounds read.

This vulnerability is documented as CVE-2026-116620. The attack can be initiated remotely. Additionally, an exploit exists.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More