CVE-2024-23337

CVE-2024-23337 is an integer overflow vulnerability affecting jqlang jq versions up to and including 1.7.1. This flaw occurs when assigning a value using an index of 2147483647, the signed integer limit, leading to a denial of service. The vulnerability has a CVSS score of 6.5 (Medium), indicating it can be exploited remotely with low attack complexity and no privileges, resulting in high availability impact. User interaction is required for successful exploitation. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules or proof-of-concept code. Community discussion and media coverage for this CVE are minimal.