• caglararli@hotmail.com
  • 05386281520

CVE-2023-49355 | jq 1.2e-111 decNumber/decNumber.c decToString out-of-bounds write

Çağlar Arlı      -    20 Views

CVE-2023-49355 | jq 1.2e-111 decNumber/decNumber.c decToString out-of-bounds write

A vulnerability has been found in jq 1.2e-111 and classified as critical. This vulnerability affects the function decToString of the file decNumber/decNumber.c. The manipulation with the input []-1.2e-1111111111 leads to out-of-bounds write. This vulnerability was named CVE-2023-49355. Access to the local network is required for this attack. There is no exploit available.