-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
RubyRuby| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| red-arrow | rubygems | >= 0.14.0, < 0.15.1 | 0.15.1 |
| pyarrow | pip | >= 0.14.0, < 0.15.1 | 0.15.1 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from uninitialized memory in arrays with null values. Key functions involve buffer resizing (BufferBuilder::Resize), array finalization (ArrayBuilder::FinishInternal), and bitmap writing (BitmapWriter::Finish). These functions are central to managing memory during array construction. The lack of explicit initialization in these areas aligns with the CWE-909 description. Confidence is medium due to inferred code behavior from the vulnerability description, as explicit patch details are unavailable.