Out-of-bounds Read in Ruby JSON Parser
### Impact A specially crafted document could cause an out of bound read, most likely resulting in a crash. Versions 2.10.0 and 2.10.1 are impacted. Older versions are not. ### Patches Version 2.10.2 fixes the problem. ### Workarounds None.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-27788US | high7.5 | — | ||
JSON is a JSON implementation for Ruby. Starting in version 2.10.0 and prior to version 2.10.2, a specially crafted document could cause an out of bound read, most likely resulting… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/ruby/jsonPACKAGE
- https://github.com/ruby/json/commit/c56db31f800d5d508389793e69682f99749dbadfWEB
- https://github.com/ruby/json/releases/tag/v2.10.2WEB
- https://github.com/ruby/json/security/advisories/GHSA-9m3q-rhmv-5q44WEB
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/json/CVE-2025-27788.ymlWEB
- https://nvd.nist.gov/vuln/detail/CVE-2025-27788ADVISORY
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan