2474 matches found
bigdecimal-segfault-fix
h1. BigDecimal Segfault Fix There is a segfault bug in ruby's big decimal library which can be triggered by users providing known-bad values. If you wish to test whether your application is secure run +example.rb+. This script should exit normally, not segfault. The workaround has negative...
CVE-2022-34556
Description of CVE-2022-34556 PicoC v3.2.2 was discovered to contain a NULL pointer dereference at variable.c. Any project or library that uses Picoc also suffers from this issue. An example of this would be picoc-js. Setting up our environment To replicate the null pointer dereference...
sfop
Segmentation Fault-Oriented Programming SFOP This is the artifacts repository for the Segmentation Fault-Oriented Programming exploitation technique. Artifacts Collection Here we briefly describe the artifacts in this repository. In total, there are eight different artifacts, composed of six PoC...
CVE-2022-34913
Description of CVE-2022-34913 md2roff 1.7 suffers from a stack-based buffer overflow via a Markdown file containing a large number of consecutive characters to be processed. Replication To replicate the vulnerability, we must download a vulnerable version of md2roff version 1.7: git clone...
CVE-2026-126064
Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.5, the CRuby native extension can leave Ruby wrappers pointing to freed memory when Nokogiri::XML::Node= or Nokogiri::XML::Nodelang= replaces an existing attribute value after code has accessed the...
UBUNTU-CVE-2026-126064
Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.5, the CRuby native extension can leave Ruby wrappers pointing to freed memory when Nokogiri::XML::Node= or Nokogiri::XML::Nodelang= replaces an existing attribute value after code has accessed the...
SUSE CVE-2026-126064
Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.5, the CRuby native extension can leave Ruby wrappers pointing to freed memory when Nokogiri::XML::Node= or Nokogiri::XML::Nodelang= replaces an existing attribute value after code has accessed the...
CVE-2026-126064
Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.5, the CRuby native extension can leave Ruby wrappers pointing to freed memory when Nokogiri::XML::Node= or Nokogiri::XML::Nodelang= replaces an existing attribute value after code has accessed the...
Linux Distros Unpatched Vulnerability : CVE-2026-126064
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.5, the CRuby native extension can leave Ruby wrappers pointing ...
DEBIAN-CVE-2026-126064
Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.5, the CRuby native extension can leave Ruby wrappers pointing to freed memory when Nokogiri::XML::Node= or Nokogiri::XML::Nodelang= replaces an existing attribute value after code has accessed the...
CVE-2026-126064
Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.5, the CRuby native extension can leave Ruby wrappers pointing to freed memory when Nokogiri::XML::Node= or Nokogiri::XML::Nodelang= replaces an existing attribute value after code has accessed the...
AZL-113338 CVE-2026-126064 affecting package rubygem-nokogiri 1.19.4-1
Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.5, the CRuby native extension can leave Ruby wrappers pointing to freed memory when Nokogiri::XML::Node= or Nokogiri::XML::Nodelang= replaces an existing attribute value after code has accessed the...
Nokogiri: Use-After-Free in Nokogiri when replacing an attribute value
Summary Nokogiri's CRuby native extension could leave a Ruby wrapper pointing to freed memory when replacing the value of an existing XML attribute via Nokogiri::XML::Node= or Nokogiri::XML::Nodelang=. If Ruby code had already accessed the attribute's child nodes, replacing the value could free...
GHSA-3W22-6JFG-527W Nokogiri: Use-After-Free in Nokogiri when replacing an attribute value
Summary Nokogiri's CRuby native extension could leave a Ruby wrapper pointing to freed memory when replacing the value of an existing XML attribute via Nokogiri::XML::Node= or Nokogiri::XML::Nodelang=. If Ruby code had already accessed the attribute's child nodes, replacing the value could free...
CVE-2026-126064 Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Node#[]=` or `#lang=`
Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.5, the CRuby native extension can leave Ruby wrappers pointing to freed memory when Nokogiri::XML::Node= or Nokogiri::XML::Nodelang= replaces an existing attribute value after code has accessed the...
CVE-2026-126064
The Nokogiri library for the Ruby programming language contains a Use-After-Free vulnerability in its CRuby native extension prior to version 1.19.5 . The issue occurs when using Nokogiri::XML::Node#[]= or Nokogiri::XML::Node#lang= to replace an existing attribute value after the code has already...
CVE-2026-126064 Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Node#[]=` or `#lang=`
Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.5, the CRuby native extension can leave Ruby wrappers pointing to freed memory when Nokogiri::XML::Node= or Nokogiri::XML::Nodelang= replaces an existing attribute value after code has accessed the...
CVE-2026-126064
Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.5, the CRuby native extension can leave Ruby wrappers pointing to freed memory when Nokogiri::XML::Node= or Nokogiri::XML::Nodelang= replaces an existing attribute value after code has accessed the...
EUVD-2026-122836
Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.5, the CRuby native extension can leave Ruby wrappers pointing to freed memory when Nokogiri::XML::Node= or Nokogiri::XML::Nodelang= replaces an existing attribute value after code has accessed the...
CVE-2026-126064 Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Node#[]=` or `#lang=`
Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.5, the CRuby native extension can leave Ruby wrappers pointing to freed memory when Nokogiri::XML::Node= or Nokogiri::XML::Nodelang= replaces an existing attribute value after code has accessed the...