https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 05:31:44 +0000 https://vulnerability.circl.lu/vuln/cve-2024-53427 <p><strong>Affected:</strong> jqlang jq</p> <p>decNumberCopy in decNumber.c in jq through 1.7.1 does not properly consider that NaN is interpreted as numeric, which has a resultant stack-based buffer overflow and out-of-bounds write, as demonstrated by use of --slurp with subtraction, such as a filter of .-. when the input has a certain form of digit string with NaN (e.g., &#34;1 NaN123&#34; immediately followed by many more digits).</p> <p><strong>Affected:</strong> jqlang jq</p> <p>decNumberCopy in decNumber.c in jq through 1.7.1 does not properly consider that NaN is interpreted as numeric, which has a resultant stack-based buffer overflow and out-of-bounds write, as demonstrated by use of --slurp with subtraction, such as a filter of .-. when the input has a certain form of digit string with NaN (e.g., &#34;1 NaN123&#34; immediately followed by many more digits).</p> https://vulnerability.circl.lu/vuln/cve-2024-53427