Lucene search

K
cvelistMitreCVELIST:CVE-2023-49355
HistoryDec 11, 2023 - 12:00 a.m.

CVE-2023-49355

2023-12-1100:00:00
mitre
www.cve.org
1
jq
decnumber.c
dectostring
vulnerability

6.7 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.9%

decToString in decNumber/decNumber.c in jq 88f01a7 has a one-byte out-of-bounds write via the " []-1.2e-1111111111" input. NOTE: this is not the same as CVE-2023-50246. The CVE-2023-50246 71c2ab5 reference mentions -10E-1000010001, which is not in normalized scientific notation.

6.7 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.9%