PT-2025-8729

CVE-2024-53427

Published

2025-02-26

Updated

2026-09-21

CVSS 3.1

8.1

High

MetricsAV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions jq version 1.7.1

Description The issue is related to a stack-buffer-overflow in the decNumberCopy function within decNumber.c.

Recommendations For jq version 1.7.1, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

GHSA-X6C3-QV5R-7Q22

ALT-PU-2025-7731

AZL-57376

ECHO-9E32-4170-F69D

OPENSUSE-SU-2025:15161-1

SUSE-SU-2025:20591-1

SUSE-SU-2026:23873-1

SUSE-SU-2026:4275-1

USN-7657-1

Found an issue in the description? Have something to add? Feel free to write us 👾