jq: out-of-bounds read in jv_parse_sized() on error formatting for non-NUL-terminated buffers

A flaw was found in jq, a command line JSON processor, specifically in the libjq API. Parsing a malformed JSON input from a non-NUL-terminated buffer using the jvparsesized function can cause an out-of-bounds read, resulting in an application crash and a possible memory disclosure within the erro...

CVE-2025-65296

Several Aqara smart home products are susceptible to NULL-pointer dereference vulnerabilities during JSON processing . The affected devices include the Aqara Hub M2 (version 4.3.6_0027), Hub M3 (version 4.3.6_0025), and Camera Hub G3 (version 4.1.9_0027). An attacker can provide malformed JSON in...

AnythingLLM 安全漏洞

AnythingLLM is an all-in-one AI application open-sourced by Mintplex. A security vulnerability exists in version 6dc3642 of AnythingLLM, which stems from an unauthenticated denial of service in the API embedded in the chat functionality, which allows an attacker to cause the server to crash by...