CVE-2025-9403 - CVE House
Back to Database
Status published Medium CVE-2025-9403

jqlang jq JSON jq_test.c run_jq_tests assertion

Vulnerability Description

A vulnerability was determined in jqlang jq up to 1.6. Impacted is the function run_jq_tests of the file jq_test.c of the component JSON Parser. Executing manipulation can lead to reachable assertion. The attack requires local access. The exploit has been publicly disclosed and may be utilized. Other versions might be affected as well.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-9403

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • xdcao (VulDB User)

References

More from jqlang

View All →
CVE-2025-49014
jq heap use after free vulnerability in f_strflocaltime
Medium 5.5
CVE-2025-48060
AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt)
High 7.7
CVE-2024-53427
decNumberCopy in decNumber.c in jq through 1.7.1 does not properly...
High 8.1
CVE-2024-23337
jq has signed integer overflow in jv.c:jvp_array_write
Medium 4.3
CVE-2023-50268
jq has stack-based buffer overflow in decNaNs
Medium 6.2

Affected Vendor

Affected Software

jq
Vulnerable Versions:
1.0, 1.1, 1.2, 1.3, 1.4, 1.5, 1.6

Timeline

Official Publish: August 25th, 2025
Last Modified: August 25th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R

Weaknesses (CWE)

CWE-617

MITRE ATT&CK TTPs

T1499 Endpoint Denial of Service
Impact
T1190 Exploit Public-Facing Application
Initial Access
T1059 Command and Scripting Interpreter
Execution
T1562 Impair Defenses
Defense Evasion
T1485 Data Destruction
Impact