Ruby · weakness class
Memory Corruption
7 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.
- An exploitable heap overflow vulnerability exists in the Fiddle::Function.new "initialize" function functionality of Ruby. In Fiddle::Function.new "initialize" heap buffer "arg_ty…
- Ruby JSON has a format string injection vulnerability
- Ruby JSON Parser has Out-of-bounds Read
- zlib: Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption
- Ruby JSON: JSON::ResumableParser#partial_value dereferences a freed input buffer and crashes on truncated duplicate-key streams
- Ruby JSON: JSON generator heap buffer overflow when streaming to an IO
- An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::MessageEncoder wrote a DNS label's length into a single octet without checking its range. A label lon…
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.