CVE-2025-9403CWE-617

jqlang jq JSON jq_test.c run_jq_tests assertion

Medium · published August 25, 2025

CVSS v4.0
4.8
EPSS
0%
Percentile
11.4
In the wild
Unconfirmed
What it is

A vulnerability was determined in jqlang jq up to 1.6. Impacted is the function run_jq_tests of the file jq_test.c of the component JSON Parser. Executing manipulation can lead to reachable assertion. The attack requires local access. The exploit has been publicly disclosed and may be utilized. Other versions might be affected as well.

The record
Technical detail
CVSS v4.0
4.8 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
EPSS
0.00216 · 11.4th percentile
Weakness
CWE-617 · Reachable Assertion
Published
2025-08-25T02:02Z
EPSS history
Timeline
  • 25 AUG 02:02Z
    jqlang jq JSON jq_test.c run_jq_tests assertion
    cvelistv5