OSV-2023-1239

    Dashboard / Vulnerabilities / OSV-2023-1239

    OSV-2023-1239

    Published: 30 Nov 2023Last Modified: 30 Nov 2023

    Summary: Heap-buffer-overflow in decToString

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64574 ``` Crash type: Heap-buffer-overflow WRITE 1 Crash state: decToString decNumberToString jv_number_get_literal ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64574

    Affected packages

    Package

    Name: jq

    Purl: pkg:generic/jq

    Affected ranges

    Type: GIT

    Events:

    Introduced- d14393f5522531f57b8e3a83c04b7990c64a249e
    Fixed -71c2ab509a8628dbbad4bc7b3f98a64aa90d3297

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2023-1239 | CVE-DB