Vulnerabilities > CVE-2022-28738 - Double Free vulnerability in Ruby-Lang Ruby
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untrusted user input, an attacker may be able to write to unexpected memory locations.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 10 |