NetSight
IP …
high7.5

CVE-2022-28739

There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x before 3.1.2.

Impact

There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x before 3.1.2. It occurs in String-to-Float conversion, including Kernel#Float and String#to_f.

Affected products

VendorProductAffected versions
Ruby-LangRuby
before 2.6.10
from 2.7.0 before 2.7.6
from 3.0.0 before 3.0.4
from 3.1.0 before 3.1.2
DebianDebian Linux
Versions 9.0, 10.0, 11.0
AppleMacos
from 11.0 before 11.7.1
from 12.0 before 12.6.1

Weakness classification

CWE-125

References