logo

Database

Out-of-bounds read In json

Description

Out-of-bounds Read in Ruby JSON Parser

Impact

A specially crafted document could cause an out of bound read, most likely resulting in a crash.

Versions 2.10.0 and 2.10.1 are impacted. Older versions are not.

Patches

Version 2.10.2 fixes the problem.

Workarounds

None.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2025-277882. NVD-2025-277883. OSV-2025-277884. GHSA-9m3q-rhmv-5q445. GCVE-2025-27788

References

1. https://github.com/ruby/json/security/advisories/GHSA-9m3q-rhmv-5q442. https://github.com/ruby/json/commit/c56db31f800d5d508389793e69682f99749dbadf3. https://github.com/ruby/json/releases/tag/v2.10.24. https://github.com/rubysec/ruby-advisory-db/blob/master/gems/json/CVE-2025-27788.yml

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.

FLAT-X1FSF – Vulnerability | Fluid Attacks Database