Skip to content
VulniPulse
Sign in
Highest advisory severityMedium 1 vendor · 1 advisory

CVE-2026-49839

CVE-2026-49839: 1 tracked advisory record across Red Hat. Compare vendor sources and published fix guidance.

Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.

NVD detail CVE.org

Vendor advisory comparison

Red Hat

1 advisory
  • Advisory severityMedium6.6

    Medium [CVE-2026-49839] Heap out-of-bounds write via oversized raw file processing

    CVE-2026-49839Source published Source updated

    jq is a command-line JSON processor. Prior to 1.8.2,` jq --rawfile` can turn a handled oversized-string error into invalid-state reuse and a real heap out-of-bounds write in assertion-disabled builds. When jv_load_file(raw=1) reads an attacker-controlled file, it repeatedly appends file chunks to the same jv string accumulator. Once jv_string_append_buf() returns jv_invalid_with_msg("String too long"), the raw-file loop does not stop. If the file contains at least one more byte, the next loop iteration appends a new chunk to an object that is already invalid. With assertions enabled this aborts in jvp_string_ptr(). With assertions disabled, the invalid object is interpreted as a string object and ASan reports heap-buffer-overflow. This vulnerability is fixed in 1.8.2. This vulnerability…

    Affected products in this advisory
    • Red Hat Hardened Images
    • Red Hat Ansible Automation Platform 2
    • Red Hat Ceph Storage 4
    • Red Hat Enterprise Linux 10

    4 more entries in the full advisory.

    Source-reported affected versions
    • < 1.8.2
    Source-reported fixed versions
    • 1.8.2
    • jq-main-1.8.2-0.1.hum1
    • RHSA-2026:29986
    Mitigation guidance
    • Avoid using `jq --rawfile` with untrusted or user-controlled files.
    Full advisory and evidenceOpen source bulletin

Android app · Google Play

Monitor future Red Hat CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery
Get CVE alertsSee app features