CVE-2022-28738
Unknown
Unknown - Not Provided
BaseFortify
Vulnerability report for CVE-2022-28738, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2022-05-09
Last updated on: 2024-11-21
Assigner: MITRE
Description
Description
A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untrusted user input, an attacker may be able to write to unexpected memory locations.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-415 | The product calls free() twice on the same memory address. |
