cve/2024/CVE-2024-21907.md

### [CVE-2024-21907](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21907)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-755%20Improper%20Handling%20of%20Exceptional%20Conditions&color=brighgreen)

### Description

Newtonsoft.Json before version 13.0.1 is affected by a mishandling of exceptional conditions vulnerability. Crafted data that is passed to the JsonConvert.DeserializeObject method may trigger a StackOverflow exception resulting in denial of service. Depending on the usage of the library, an unauthenticated and remote attacker may be able to cause the denial of service condition.

### POC

#### Reference
- https://alephsecurity.com/vulns/aleph-2018004
- https://alephsecurity.com/vulns/aleph-2018004
- https://security.snyk.io/vuln/SNYK-DOTNET-NEWTONSOFTJSON-2774678
- https://security.snyk.io/vuln/SNYK-DOTNET-NEWTONSOFTJSON-2774678

#### Github
- https://github.com/aargenveldt/SbomTest