Out-of-bounds Read in Ruby JSON Parser

Description

References

• ruby/json security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2025-27788 · ADVISORY
• ruby/json commit c56db31 · WEB
• ruby/json · PACKAGE
• ruby/json release v2.10.2 · WEB
• rubysec/ruby-advisory-db · WEB

Mais vulnerabilidades de json

• CVE-2026-71847ALTO 8.7Ruby JSON is a JSON implementation for Ruby. From 2.20.0 until 2.21.2, Ruby's JSON native C extension clears the consumed JSON::ResumablePar…
• CVE-2026-54696BAIXO 3.7Ruby JSON is a JSON implementation for Ruby. Versions 2.9.0 through 2.19.8 are vulnerable to heap buffer overflow when the JSON generator is…
• CVE-2026-33210CRÍTICO 9.1Ruby JSON is a JSON implementation for Ruby. From version 2.14.0 to before versions 2.15.2.1, 2.17.1.2, and 2.19.2, a format string injectio…
• CVE-2020-10663ALTO 7.5The JSON gem through 2.2.0 for Ruby, as used in Ruby 2.4 through 2.4.9, 2.5 through 2.5.7, and 2.6 through 2.6.5, has an Unsafe Object Creat…
• CVE-2013-0269ALTO 7.5The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service (resourc…