CVE-2025-49014
jq heap use after free vulnerability in f_strflocaltime
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
jq heap use after free vulnerability in f_strflocaltime
jq is a command-line JSON processor. In version 1.8.0 a heap use after free vulnerability exists within the function f_strflocaltime of /src/builtin.c. This issue has been patched in commit 499c91b, no known fix version exists at time of publication.
Reserved 2025-05-29 | Published 2025-06-19 | Updated 2025-06-19 | Assigner GitHub_Mgithub.com/jqlang/jq/security/advisories/GHSA-rmjp-cr27-wpg2
github.com/...ommit/499c91bca9d4d027833bc62787d1bb075c03680e
Support options
