Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2025-48060

Опубликовано: 29 июл. 2025
Источник: msrc
CVSS3: 7.5
EPSS Низкий

Описание

AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt)

EPSS

Процентиль: 26%
0.00088
Низкий

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
ubuntu
6 месяцев назад

jq is a command-line JSON processor. In versions up to and including 1.7.1, a heap-buffer-overflow is present in function `jv_string_vfmt` in the jq_fuzz_execute harness from oss-fuzz. This crash happens on file jv.c, line 1456 `void* p = malloc(sz);`. As of time of publication, no patched versions are available.

CVSS3: 5.5
redhat
6 месяцев назад

jq is a command-line JSON processor. In versions up to and including 1.7.1, a heap-buffer-overflow is present in function `jv_string_vfmt` in the jq_fuzz_execute harness from oss-fuzz. This crash happens on file jv.c, line 1456 `void* p = malloc(sz);`. As of time of publication, no patched versions are available.

CVSS3: 7.5
nvd
6 месяцев назад

jq is a command-line JSON processor. In versions up to and including 1.7.1, a heap-buffer-overflow is present in function `jv_string_vfmt` in the jq_fuzz_execute harness from oss-fuzz. This crash happens on file jv.c, line 1456 `void* p = malloc(sz);`. As of time of publication, no patched versions are available.

CVSS3: 7.5
debian
6 месяцев назад

jq is a command-line JSON processor. In versions up to and including 1 ...

suse-cvrf
3 месяца назад

Security update for jq

EPSS

Процентиль: 26%
0.00088
Низкий

7.5 High

CVSS3