CVE-2025-48060 – jq Heap Buffer Overflow Vulnerability

CVE ID : CVE-2025-48060

Published : May 21, 2025, 6:15 p.m. | 57 minutes ago

Description : jq is a command-line JSON processor. In versions up to and including 1.7.1, a heap-buffer-overflow is present in function `jv_string_vfmt` in the jq_fuzz_execute harness from oss-fuzz. This crash happens on file jv.c, line 1456 `void* p = malloc(sz);`. As of time of publication, no patched versions are available.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…