PT-2025-8729 · Jq+5 · Jq+5

Cla7Aye15I4Ndo · Published 2025-02-26 · Updated 2025-09-25 · CVE-2024-53427

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions jq version 1.7.1

Description The issue is related to a stack-buffer-overflow in the decNumberCopy function within decNumber.c.

Recommendations For jq version 1.7.1, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Type Confusion

Weakness Enumeration

CWE-843

Related Identifiers

ALT-PU-2025-7731

AZL-57376

BDU:2025-06690

CVE-2024-53427

ECHO-9E32-4170-F69D

GHSA-X6C3-QV5R-7Q22

OPENSUSE-SU-2025:15161-1

SUSE-SU-2025:20591-1

USN-7657-1

Affected Products

Alt Linux

Debian

Linuxmint

Red Os

Ubuntu

Jq

References · 46

• https://github.com/jqlang/jq/issues/3296 · Vendor Advisory
• https://github.com/jqlang/jq/security/advisories/GHSA-x6c3-qv5r-7q22 · Vendor Advisory
• https://github.com/jqlang/jq/issues/3196 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-23337 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-53427 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-53427 · Security Note
• https://osv.dev/vulnerability/AZL-57376 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-53427 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-06690 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:20591-1 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2024-53427 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-53427 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-53427 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-53427 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7657-1 · Vendor Advisory