There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x before 3.1.2. It occurs in String-to-Float conversion, including Kernel#Float and String#to_f.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2022-05-09T00:00:00
Updated: 2024-08-03T06:03:52.581Z
Reserved: 2022-04-06T00:00:00
Link: CVE-2022-28739
Vulnrichment
No data.
NVD
Status : Modified
Published: 2022-05-09T18:15:08.540
Modified: 2024-11-21T06:57:50.467
Link: CVE-2022-28739
Redhat