In Exim before 4.99.2, when JSON lookup is enabled, an out-of-bounds heap write can occur when a JSON operator encounters malformed JSON in an untrusted header, because of an incorrect implementation of \ skipping.
4.92.1-1ubuntu34.92.1-1ubuntu44.93-11ubuntu14.93-12ubuntu14.93-13ubuntu14.93-13ubuntu1.14.93-13ubuntu1.104.93-13ubuntu1.114.93-13ubuntu1.124.93-13ubuntu1.5+6 more4.95-4ubuntu2.74.97-4ubuntu4.44.98.2-1ubuntu2.14.99.1-1ubuntu1.14.80-7ubuntu34.80-7ubuntu44.80-9ubuntu14.80-9ubuntu24.82-3ubuntu14.82-3ubuntu24.82-3ubuntu2.14.82-3ubuntu2.24.82-3ubuntu2.34.82-3ubuntu2.4+7 more4.86-3ubuntu14.86-7ubuntu14.86-7ubuntu24.86-7ubuntu34.86.2-2ubuntu14.86.2-2ubuntu24.86.2-2ubuntu2.14.86.2-2ubuntu2.24.86.2-2ubuntu2.34.86.2-2ubuntu2.4+9 more4.89-5ubuntu14.89-9ubuntu14.89-9ubuntu24.89-9ubuntu34.89-9ubuntu44.90.1-1ubuntu14.90.1-1ubuntu1.14.90.1-1ubuntu1.104.90.1-1ubuntu1.10+esm14.90.1-1ubuntu1.10+esm2+9 moreExploitability
AV:NAC:HPR:NUI:NScope
S:UImpact
C:NI:LA:HCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H