Lucene search
+L

1 matches found

OSV
OSV
added 2022/04/05 4:15 p.m.10 views

AZL-10552 CVE-2022-24795 affecting package rubygem-yajl-ruby for versions less than 1.3.1-2

yajl-ruby is a C binding to the YAJL JSON parsing and generation library. The 1.x branch and the 2.x branch of yajl contain an integer overflow which leads to subsequent heap memory corruption when dealing with large 2GB inputs. The reallocation logic at yajlbuf.cL64 may result in the need 32bit...

7.5CVSS7.5AI score0.03472EPSS
SaveExploits1References1
Rows per page
Query Builder