CVE-2023-49355

decToString in decNumber/decNumber.c in jq 88f01a7 has a one-byte out-of-bounds write via the " []-1.2e-1111111111" input. NOTE: this is not the same as CVE-2023-50246. The CVE-2023-50246 71c2ab5 reference mentions -10E-1000010001, which is not in normalized scientific notation.

• CWE-787
• CWE-787

• https://github.com/jqlang/jq/blob/88f01a741c8d63c4d1b5bc3ef61520c6eb93edaa/src/decNumber/decNumber.c#L3764Product
• https://github.com/jqlang/jq/tree/88f01a741c8d63c4d1b5bc3ef61520c6eb93edaaPatch
• https://github.com/linzc21/bug-reports/blob/main/reports/jq/1.7-37-g88f01a7/heap-buffer-overflow/CVE-2023-49355.mdExploit
• https://github.com/jqlang/jq/blob/88f01a741c8d63c4d1b5bc3ef61520c6eb93edaa/src/decNumber/decNumber.c#L3764Product
• https://github.com/jqlang/jq/tree/88f01a741c8d63c4d1b5bc3ef61520c6eb93edaaPatch
• https://github.com/linzc21/bug-reports/blob/main/reports/jq/1.7-37-g88f01a7/heap-buffer-overflow/CVE-2023-49355.mdExploit

Published

Dec 11, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-49344Temporary data passed between application components by Budg…7.8
• CVE-2023-49345Temporary data passed between application components by Budg…7.8
• CVE-2023-49346Temporary data passed between application components by Budg…7.8
• CVE-2023-49347Temporary data passed between application components by Budg…7.8
• CVE-2023-4935The BEAR for WordPress is vulnerable to Cross-Site Request F…4.3
• CVE-2023-49351A stack-based buffer overflow vulnerability in /bin/webs bin…9.8
• CVE-2023-49356A stack buffer overflow vulnerability in MP3Gain v1.6.2 allo…7.5
• CVE-2023-4936It is possible to sideload a compromised DLL during the inst…6.7
• CVE-2023-49363Rockoa <2.3.3 is vulnerable to SQL Injection. The problem ex…9.8
• CVE-2023-49367An issue in user interface in Kyocera Command Center RX EXOS…8.8
• CVE-2023-4937The BEAR for WordPress is vulnerable to Cross-Site Request F…4.3
• CVE-2023-49371RuoYi up to v4.6 was discovered to contain a SQL injection v…9.8