OSV-2023-1268

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2023-1268

Published

2023-12-08T00:11:32.086790Z

Modified

2023-12-08T00:11:32.087163Z

Summary

Stack-buffer-overflow in decNaNs

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64771

Crash type: Stack-buffer-overflow WRITE 2
Crash state:
decNaNs
decCompareOp
decNumberCompare

References

Affected packages

Type: GIT
Repo: https://github.com/jqlang/jq
Events: Introduced

bfb7fd570f521ef832fe1c3bca0e05abd398284c

Fixed

c9a51565214eece8f1053089739aea73145bfd6b

{
    "severity": "HIGH"
}