jq has signed integer overflow in jv.c:jvp_array_write
Priority MEDIUM 62CWE-190Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Partial Red Hat: 18 fixed, 3 without a fix
Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-190 and the CVSS impact.
Summary
jq is a command-line JSON processor. In versions up to and including 1.7.1, an integer overflow arises when assigning value using an index of 2147483647, the signed integer limit. This causes a denial of service. Commit de21386681c0df0104a99d9d09db23a9b2a78b1e contains a patch for the issue.
Why it matters now
Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.0046 40th percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by NVD
Fix Partial Red Hat: 10 advisoriesRed Hat: 18 fixed, 3 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
Remediation
Red Hat 10 advisories
- RHSA-2025:12882 Released 2025-08-05 · Red Hat rating Moderatejq security update
- Red Hat Enterprise Linux BaseOS (v. 10) jq-1.7.1-8.el10_0.1
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) jq-devel-1.7.1-8.el10_0.1
- RHSA-2025:10618 Released 2025-07-08 · Red Hat rating Moderatejq security update
- Red Hat Enterprise Linux AppStream (v. 8) jq-1.6-11.el8_10
- Red Hat Enterprise Linux CRB (v. 8) jq-devel-1.6-11.el8_10
- RHSA-2025:10620 Released 2025-07-08 · Red Hat rating Moderatejq security update
- Red Hat Enterprise Linux AppStream AUS (v.8.6) jq-1.6-3.el8_6.1
- Red Hat Enterprise Linux AppStream E4S (v.8.6) jq-1.6-3.el8_6.1
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) jq-1.6-3.el8_6.1
- Red Hat Enterprise Linux AppStream TUS (v.8.6) jq-1.6-3.el8_6.1
Show 7 more Red Hat advisories
- RHSA-2025:10622 Released 2025-07-08 · Red Hat rating Moderatejq security update
- Red Hat Enterprise Linux AppStream AUS (v. 8.2) jq-1.5-12.el8_2.1
- RHSA-2025:10621 Released 2025-07-08 · Red Hat rating Moderatejq security update
- Red Hat Enterprise Linux AppStream AUS (v.8.4) jq-1.5-12.el8_4.4
- RHSA-2025:10619 Released 2025-07-08 · Red Hat rating Moderatejq security update
- Red Hat Enterprise Linux AppStream E4S (v.8.8) jq-1.6-6.el8_8.3
- Red Hat Enterprise Linux AppStream TUS (v.8.8) jq-1.6-6.el8_8.3
- RHSA-2025:10615 Released 2025-07-08 · Red Hat rating Moderatejq security update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) jq-1.6-15.el9_2.2
- RHSA-2025:10616 Released 2025-07-08 · Red Hat rating Moderatejq security update
- Red Hat Enterprise Linux AppStream E4S (v.9.0) jq-1.6-12.el9_0.1
- RHSA-2025:10613 Released 2025-07-08 · Red Hat rating Moderatejq security update
- Red Hat CodeReady Linux Builder EUS (v.9.4) jq-devel-1.6-16.el9_4.1
- Red Hat Enterprise Linux BaseOS EUS (v.9.4) jq-1.6-16.el9_4.1
- RHSA-2025:10585 Released 2025-07-08 · Red Hat rating Moderatejq security update
- Red Hat Enterprise Linux BaseOS (v. 9) jq-1.6-17.el9_6.2
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) jq-devel-1.6-17.el9_6.2
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Ansible Automation Platform 2 | Affected | No fix yet: Fix deferred |
| Red Hat Ceph Storage 4 | Affected | No fix yet: Fix deferred |
| Red Hat OpenShift Container Platform 4 | Affected | No fix yet: Fix deferred |
| Red Hat CodeReady Linux Builder EUS (v.9.4) | Fixed | RHSA-2025:10613 |
| Red Hat Enterprise Linux AppStream (v. 8) | Fixed | RHSA-2025:10618 |
| Red Hat Enterprise Linux AppStream AUS (v. 8.2) | Fixed | RHSA-2025:10622 |
| Red Hat Enterprise Linux AppStream AUS (v.8.4) | Fixed | RHSA-2025:10621 |
| Red Hat Enterprise Linux AppStream AUS (v.8.6) | Fixed | RHSA-2025:10620 |
| Red Hat Enterprise Linux AppStream E4S (v.8.6) | Fixed | RHSA-2025:10620 |
| Red Hat Enterprise Linux AppStream E4S (v.8.8) | Fixed | RHSA-2025:10619 |
| Red Hat Enterprise Linux AppStream E4S (v.9.0) | Fixed | RHSA-2025:10616 |
| Red Hat Enterprise Linux AppStream E4S (v.9.2) | Fixed | RHSA-2025:10615 |
| Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) | Fixed | RHSA-2025:10620 |
| Red Hat Enterprise Linux AppStream TUS (v.8.6) | Fixed | RHSA-2025:10620 |
| Red Hat Enterprise Linux AppStream TUS (v.8.8) | Fixed | RHSA-2025:10619 |
| Red Hat Enterprise Linux BaseOS (v. 10) | Fixed | RHSA-2025:12882 |
| Red Hat Enterprise Linux BaseOS (v. 9) | Fixed | RHSA-2025:10585 |
| Red Hat Enterprise Linux BaseOS EUS (v.9.4) | Fixed | RHSA-2025:10613 |
| Red Hat Enterprise Linux CRB (v. 8) | Fixed | RHSA-2025:10618 |
| Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) | Fixed | RHSA-2025:12882 |
| Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) | Fixed | RHSA-2025:10585 |
Timeline
- 2026-10-02 Threatist record created from CVE-2024-23337
References
More jqlang Jq vulnerabilities
- TI-2026-24844 jq: Integer overflow in jvp_string_append() allows Heap-based Buffer Overflow CVSS 3.1HIGH 8.2
- TI-2025-30431 AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt) CVSS 4.0HIGH 7.7
- TI-2023-26962 decToString in decNumber/decNumber.c in jq 88f01a7 has a one-byte out-of-bounds write via… CVSS 3.1HIGH 7.5
- TI-2026-28834 jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers CVSS 4.0MEDIUM 6.9
- TI-2024-35799 Type confusion in jqlang jq CVSS 3.1HIGH 8.1
- TI-2026-36743 jq --rawfile invalid-state reuse after String too long causes heap-buffer-overflow CVSS 3.1HIGH 7.1
Sources
- CVE-2024-23337 · CVE Program
- CVE-2024-23337 · NVD
- FIRST EPSS
- CVE-2024-23337 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences