Out-of-bounds Read in Ruby JSON Parser
### Impact A specially crafted document could cause an out of bound read, most likely resulting in a crash. Versions 2.10.0 and 2.10.1 are impacted. Older versions are not. ### Patches Version 2.10.2 fixes the problem. ### Workarounds None.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-27788US | high7.5 | — | ||
JSON is a JSON implementation for Ruby. Starting in version 2.10.0 and prior to version 2.10.2, a specially crafted document could cause an out of bound read, most likely resulting… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/ruby/jsonPACKAGE
- https://github.com/ruby/json/commit/c56db31f800d5d508389793e69682f99749dbadfWEB
- https://github.com/ruby/json/releases/tag/v2.10.2WEB
- https://github.com/ruby/json/security/advisories/GHSA-9m3q-rhmv-5q44WEB
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/json/CVE-2025-27788.ymlWEB
- https://nvd.nist.gov/vuln/detail/CVE-2025-27788ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan