Medium6.6Red Hat Linux

Medium [CVE-2026-49839] Heap out-of-bounds write via oversized raw file processing

This medium-severity Red Hat Linux advisory covers CVE-2026-49839.

CVE-2026-49839 Published Jun 25, 2026Updated by vendor Jun 25, 2026

CVE-2026-49839

Affected products & platforms

Red Hat LinuxUnclassified

Open vendor advisory

Android app · Google Play

Monitor future Red Hat Linux CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery

Get CVE alerts See app features

Summary

Heap out-of-bounds write via oversized raw file processing. Red Hat rates this moderate (CVSS 6.6).

Weakness: CWE-787. Red Hat lists fixing advisory RHSA-2026:29986 with package jq-main-1.8.2-0.1.hum1.

Affected versions

jq-main-1.8.2-0.1.hum1

Official advisory · high-confidence parse· fetched 2 months ago·verify at source

Fixed versions

jq-main-1.8.2-0.1.hum1
RHSA-2026:29986

Official advisory · high-confidence parse· fetched 2 months ago·verify at source

Mitigation checklist

Recommended fix / mitigation

Avoid using `jq --rawfile` with untrusted or user-controlled files.

Official advisory · high-confidence parse· fetched 2 months ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.