Heap-based Buffer Overflow

libjq.so is vulnerable to Heap-based Buffer Overflow. The vulnerability is caused by not allocating enough buffer when calling the decNumberToString function. decNumberToString calls for a buffer that can hold a string of digits+14 characters, not a buffer of size digits+14 one extra byte in the...

OSV-2023-1239 Heap-buffer-overflow in decToString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64574 Crash type: Heap-buffer-overflow WRITE 1 Crash state: decToString decNumberToString jvnumbergetliteral...