CVE-2025-9403

Katalog CVE

CVSS 5.5 · Medium EPSS 0,22%

Kerentanan Reachable Assertion pada jqlang jq. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability was determined in jqlang jq up to 1.6. Impacted is the function run_jq_tests of the file jq_test.c of the component JSON Parser. Executing manipulation can lead to reachable assertion. The attack requires local access. The exploit has been publicly disclosed and may be utilized. Other versions might be affected as well.

Rincian

Terbit di NVD

25 Agustus 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-617: Reachable Assertion

EPSS (30 hari)

0,22% peluang dieksploitasi; lebih tinggi dari 11,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/jqlang/jq/issues/3393 exploit · issue tracking · advisory vendor
• https://vuldb.com/?id.321239 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.633170 exploit · advisory pihak ketiga · vdb entry
• https://drive.google.com/file/d/1r8m9PhU_rk-QPj6OMcs415FcvWPD-zJY/view?usp=sharing exploit
• https://vuldb.com/?ctiid.321239 permissions required · vdb entry