Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5
CVE-2022-24795
- EPSS 1.34%
- Published 05.04.2022 16:15:14
- Last modified 21.11.2024 06:51:06
yajl-ruby is a C binding to the YAJL JSON parsing and generation library. The 1.x branch and the 2.x branch of `yajl` contain an integer overflow which leads to subsequent heap memory corruption when dealing with large (~2GB) inputs. The reallocation...
7.5
CVE-2017-16516
- EPSS 1.29%
- Published 03.11.2017 15:29:00
- Last modified 20.04.2025 01:37:25
In the yajl-ruby gem 1.3.0 for Ruby, when a crafted JSON file is supplied to Yajl::Parser.new.parse, the whole ruby process crashes with a SIGABRT in the yajl_string_decode function in yajl_encode.c. This results in the whole ruby process terminating...
1