-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
RubyRubyMiggo AIRoot Cause AnalysisThe vulnerability stems from the buffer management in ungetbyte/ungetc operations. The commit c58c5f5 shows a critical fix in strio_unget_bytes where buffer expansion calculations were incorrect (ex = cl - (rest < 0 ? pos : len) vs original flawed logic). This miscalculation allowed writing beyond the buffer's allocated space. Subsequent gets calls would then read from this corrupted buffer state, exposing memory. The test cases added for ungetc_fill/ungetbyte_fill validate this by testing large unget operations that would trigger buffer expansion.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| stringio | rubygems | < 3.0.1.1 | 3.0.1.1 |
Ongoing coverage of React2Shell