Lucene search
+L

1 matches found

RubySec
RubySec
•added 2026/08/07 12:00 a.m.•18 views

Ruby JSON - JSON::ResumableParser#partial_value dereferences a freed input buffer and crashes on truncated duplicate-key streams

Summary Ruby's JSON native C extension clears the consumed JSON::ResumableParser input buffer but leaves state.start, state.cursor, and state.end pointing into released storage. When partialvalue reconstructs an incomplete object containing duplicate keys, the duplicate-key warning path calls...

8.7CVSS6.7AI score0.00428EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder