Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-49355
HistoryDec 11, 2023 - 7:15 a.m.

Out-of-bounds

2023-12-1107:15:00
PRIOn knowledge base
www.prio-n.com
1
out-of-bounds
jq
decnumber
vulnerability
nvd

5.5 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.9%

decToString in decNumber/decNumber.c in jq 88f01a7 has a one-byte out-of-bounds write via the " []-1.2e-1111111111" input. NOTE: this is not the same as CVE-2023-50246. The CVE-2023-50246 71c2ab5 reference mentions -10E-1000010001, which is not in normalized scientific notation.

CPENameOperatorVersion
jqeq1.737.0-g88-f1-a7

5.5 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.9%