out-of-bounds read in jv_parse_sized() on error formatting for non-NUL-terminated buffers
Summary
out-of-bounds read in jv_parse_sized() on error formatting for non-NUL-terminated buffers. Red Hat rates this important (CVSS 8.2). Weakness: CWE-125. Affected package(s): rhaiis/model-opt-cuda-rhel9:1782352950, rhaiis/vllm-spyre-rhel9:1782352919, jq, rhcos, rhaiis/model-opt-cuda-rhel9:1780681984, rhaiis/vllm-rocm-rhel9:1782353093. Resolved in Red Hat advisory RHSA-2026:26542 — update the affected packages (`sudo dnf update`).
- rhaiis/model-opt-cuda-rhel9:1782352950
- rhaiis/vllm-spyre-rhel9:1782352919
- jq-0:1.6-12.el9_0.3
- jq-0:1.6-15.el9_2.3
- rhcos-414.92.202606231112-0
- jq-0:1.6-16.el9_4.2
- rhcos-418.94.202606051320-0
- rhcos-4.19.9.6.202606031700-0
- rhcos-412.86.202606140301-0
- jq-0:1.6-19.el9_8.2
- jq-0:1.6-17.el9_6.4
- jq-0:1.7.1-11.el10_1.0.2
Official advisory · high-confidence parse· fetched 5 hours ago·verify at source
- RHSA-2026:26542
Official advisory · high-confidence parse· fetched 5 hours ago·verify at source
Mitigation checklist
- Update the affected package(s) to the fixed version shipped in RHSA-2026:26542 (`sudo dnf update` / `yum update`).
Official advisory · high-confidence parse· fetched 5 hours ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.