Lucene search

K
redhatcveRedhat.comRH:CVE-2024-27280
HistoryMar 21, 2024 - 6:15 p.m.

CVE-2024-27280

2024-03-2118:15:36
redhat.com
access.redhat.com
14
cve-2024-27280
buffer overread
rubygem stringio
ungetbyte
ungetc
memory value

6.2 Medium

AI Score

Confidence

Low

A buffer overread flaw was found in rubygem StringIO. The ungetbyte and ungetc methods on a StringIO object can read past the end of a string, and a subsequent call to StringIO.gets may return the memory value.