CVE-2025-9403

ADVISORY - debian

Summary

A vulnerability was determined in jqlang jq up to 1.6. Impacted is the function run_jq_tests of the file jq_test.c of the component JSON Parser. Executing manipulation can lead to reachable assertion. The attack requires local access. The exploit has been publicly disclosed and may be utilized. Other versions might be affected as well.


EPSS Score: 0.00216 (0.121)

Common Weakness Enumeration (CWE)

ADVISORY - nist

Reachable Assertion

ADVISORY - redhat

Reachable Assertion


Debian

CREATED

UPDATED

ADVISORY IDCVE-2025-9403
EXPLOITABILITY SCORE

-

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow
PackageTypeOS NameOS VersionAffected RangesFix Versions
debian/jqdebdebian12>0Not yet available
debian/jqdebdebianunstable>0Not yet available
debian/jqdebdebian14>0Not yet available
debian/jqdebdebian13>0Not yet available

Severity and metrics

No CVSS data available from this advisory.

NIST

CREATED

UPDATED

ADVISORY IDCVE-2025-9403
EXPLOITABILITY SCORE

1.8

EXPLOITS FOUND
COMMON WEAKNESS ENUMERATION (CWE)

CVSS SCORE

1.9low

Ubuntu

CREATED

UPDATED

ADVISORY IDCVE-2025-9403
EXPLOITABILITY SCORE

1.8

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

5.5low

Red Hat

CREATED

UPDATED

ADVISORY IDCVE-2025-9403
EXPLOITABILITY SCORE

1.8

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)

CVSS SCORE

3.3low