cJSON prior to 1.7.11 allows out-of-bounds access, related to multiline comments.
cjson project cjson
oracle timesten in-memory database