CVE-2025-3588

A vulnerability, which was classified as problematic, has been found in joelittlejohn jsonschema2pojo 1.2.2. This issue affects the function apply of the file org/jsonschema2pojo/rules/SchemaRule.java of the component JSON File Handler. The manipulation leads to stack-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-119
• CWE-121

• https://github.com/joelittlejohn/jsonschema2pojo/issues/1672
• https://github.com/joelittlejohn/jsonschema2pojo/issues/1672#issue-2968446816
• https://vuldb.com/?ctiid.304643
• https://vuldb.com/?id.304643
• https://vuldb.com/?submit.550136
• https://github.com/joelittlejohn/jsonschema2pojo/issues/1672
• https://github.com/joelittlejohn/jsonschema2pojo/issues/1672#issue-2968446816

Published

Apr 14, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-3582The Newsletter WordPress plugin before 8.85 does not saniti…4.8
• CVE-2025-3583The Newsletter WordPress plugin before 8.7.1 does not sanit…4.8
• CVE-2025-3584The Newsletter WordPress plugin before 8.8.2 does not sanit…4.8
• CVE-2025-3585A vulnerability classified as critical has been found in wes…8.8
• CVE-2025-3586In Liferay Portal 7.4.3.27 through 7.4.3.42, and Liferay DXP…7.2
• CVE-2025-3587A vulnerability classified as critical was found in ZeroWdd/…8.8
• CVE-2025-3589A vulnerability, which was classified as critical, was found…9.8
• CVE-2025-3590A vulnerability has been found in Adianti Framework up to 8.…6.3
• CVE-2025-3591A vulnerability was found in ZHENFENG13/code-projects My-Blo…5.4
• CVE-2025-3592A vulnerability was found in ZHENFENG13/code-projects My-Blo…5.4
• CVE-2025-3593A vulnerability was found in ZHENFENG13/code-projects My-Blo…9.8
• CVE-2025-35939Craft CMS stores arbitrary content provided by unauthenticat…5.3