Ruby JSON Library Out-of-Bounds Read Vulnerability

A vulnerability allowing an out-of-bounds read has been identified in the Ruby JSON library, specifically in versions 2.10.0 and 2.10.1. This flaw could lead to a crash, as a result of processing a specially crafted document. Versions prior to 2.10.0 are not vulnerable, and version 2.10.2 has addressed this issue.

Impact

Exploitation of this vulnerability can cause a crash, disrupting the application's availability.

Remediation

Users can upgrade to JSON version 2.10.2 to address this vulnerability. Instructions for updating can be found in the Ruby JSON repository on GitHub.