CVE-2024-53427

HIGH EPSS 27.1%
Published Feb 26, 20251y ago · Modified Jun 17, 20262w ago
8.1 CVSS 3.1
High
Find Similar
Published Feb 26, 2025 1y ago
Last Modified Jun 17, 2026 2w ago

Description

decNumberCopy in decNumber.c in jq through 1.7.1 does not properly consider that NaN is interpreted as numeric, which has a resultant stack-based buffer overflow and out-of-bounds write, as demonstrated by use of --slurp with subtraction, such as a filter of .-. when the input has a certain form of digit string with NaN (e.g., "1 NaN123" immediately followed by many more digits).

CVSS Details

Base Score
8.1
Exploitability
1.4
Impact
6.0
Vector string
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Attack Vector Local
Attack Complexity High
Privileges Required None
User Interaction None
Scope Changed
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
27.1% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available

Weaknesses 1

CWE-843

Affected Products 1

VendorProductVersionRange
jqlangjq* ≤1.7.1

References 5

  • gist.github.com https://gist.github.com/Ekkosun/a83870ce7f3b7813b9b462a395e8ad92
    Third Party Advisory
  • github.com https://github.com/jqlang/jq/blob/71c2ab509a8628dbbad4bc7b3f98a64aa90d3297/src/decNumber/decNumber.c#L3375
    Product
  • github.com https://github.com/jqlang/jq/issues/3196
    ExploitIssue TrackingVendor Advisory
  • github.com https://github.com/jqlang/jq/issues/3296
    Issue TrackingVendor Advisory
  • github.com https://github.com/jqlang/jq/security/advisories/GHSA-x6c3-qv5r-7q22
    Vendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.