Heap-based Buffer Overflow

libjq.so is vulnerable to Heap-based Buffer Overflow. The vulnerability is caused by not allocating enough buffer when calling the decNumberToString function. decNumberToString calls for a buffer that can hold a string of digits+14 characters, not a buffer of size digits+14 (one extra byte in the end after 14 ) , resulting in buffer overflow due to not allocating memory for an extra NULL byte.