CVE-2025-9403
ADVISORY - debianSummary
A vulnerability was determined in jqlang jq up to 1.6. Impacted is the function run_jq_tests of the file jq_test.c of the component JSON Parser. Executing manipulation can lead to reachable assertion. The attack requires local access. The exploit has been publicly disclosed and may be utilized. Other versions might be affected as well.
- jq (unimportant) https://github.com/jqlang/jq/issues/3393 Assertion failure in testsuite, negligible security impact
EPSS Score: 0.00216 (0.121)
Common Weakness Enumeration (CWE)
ADVISORY - nist
Reachable Assertion
ADVISORY - redhat
Reachable Assertion
Debian
CREATED
UPDATED
ADVISORY IDCVE-2025-9403
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
N/Alow| Package | Type | OS Name | OS Version | Affected Ranges | Fix Versions |
|---|---|---|---|---|---|
| debian/jq | deb | debian | 12 | >0 | Not yet available |
| debian/jq | deb | debian | unstable | >0 | Not yet available |
| debian/jq | deb | debian | 14 | >0 | Not yet available |
| debian/jq | deb | debian | 13 | >0 | Not yet available |
Severity and metrics
No CVSS data available from this advisory.
NIST
CREATED
UPDATED
ADVISORY IDCVE-2025-9403
EXPLOITABILITY SCORE
1.8
EXPLOITS FOUND
COMMON WEAKNESS ENUMERATION (CWE)
CVSS SCORE
1.9lowUbuntu
CREATED
UPDATED
ADVISORY IDCVE-2025-9403
EXPLOITABILITY SCORE
1.8
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
5.5lowRed Hat
CREATED
UPDATED
ADVISORY IDCVE-2025-9403
EXPLOITABILITY SCORE
1.8
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)