JSON++ through 2016-06-15 has a buffer over-read in yyparse() in json.y.
json\\+\\+ project json\\+\\+