Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2025-27788

Ruby JSON Parser has Out-of-bounds Read

Description

JSON is a JSON implementation for Ruby. Starting in version 2.10.0 and prior to version 2.10.2, a specially crafted document could cause an out of bound read, most likely resulting in a crash. Versions prior to 2.10.0 are not vulnerable. Version 2.10.2 fixes the problem. No known workarounds are available.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ruby json

  • >= 2.10.0, < 2.10.2affected

References