PT-2025-22366
CVE-2024-23337
·
Published
2025-05-21
·
Updated
2026-10-19
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
jq versions up to and including 1.7.1
Description
The issue arises from an integer overflow when assigning a value using an index of 2147483647, which is the signed integer limit. This causes a denial of service.
Recommendations
For versions up to and including 1.7.1, update to a version that includes the patch from commit de21386681c0df0104a99d9d09db23a9b2a78b1e to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾