Ruby Out-of-bounds Read Vulnerability - CVE-2022-28739 - Vulnerability Database

Ruby Out-of-bounds Read Vulnerability - CVE-2022-28739

High

Reference: CVE-2022-28739

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2022-28739

Title: Ruby Out-of-bounds Read Vulnerability

Overview:

There is a buffer over-read in Ruby before 2.6.10 2.7.x before 2.7.6 3.x before 3.0.4 and 3.1.x before 3.1.2. It occurs in String-to-Float conversion including KernelFloat and Stringto_f.