ID:12582 - Exploit for Out-of-bounds read in jq - CVE-2026-39979

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to a boundary condition in the "jv_parse_sized()" function. A remote attacker can trigger an out-of-bounds read error and read contents of memory on the system or perform a denial of service (DoS) attack.

Remediation