https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:13:39.801323+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-04317 cnvd-2016-04317 2026-10-03T08:13:39.808494+00:00 cnvd-2016-04317 https://cve.radiocsirt.org/vuln/euvd-2026-82928 EUVD-2026-82928 2026-10-03T08:13:39.808525+00:00 EUVD-2026-82928 https://cve.radiocsirt.org/vuln/fkie_cve-2016-2338 fkie_cve-2016-2338 2026-10-03T08:13:39.808540+00:00

An exploitable heap overflow vulnerability exists in the Psych::Emitter start_document function of Ruby. In Psych::Emitter start_document function heap buffer "head" allocation is made based on tags array length. Specially constructed object passed as element of tags array can increase this array size after mentioned allocation and cause heap overflow.

 https://cve.radiocsirt.org/vuln/ghsa-r46x-xjwr-8v2g GHSA-r46x-xjwr-8v2g 2026-10-03T08:13:39.808569+00:00

An exploitable heap overflow vulnerability exists in the Psych::Emitter start_document function of Ruby. In Psych::Emitter start_document function heap buffer "head" allocation is made based on tags array length. Specially constructed object passed as element of tags array can increase this array size after mentioned allocation and cause heap overflow.

 https://cve.radiocsirt.org/vuln/gsd-2016-2338 gsd-2016-2338 2026-10-03T08:13:39.808585+00:00 gsd-2016-2338 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-2338 Withdrawn: UBUNTU-CVE-2016-2338 2026-10-03T08:13:39.808596+00:00

Withdrawn by the publisher.

Affected: Ubuntu:16.04:LTS: ruby2.3, Ubuntu:18.04:LTS: ruby-psych, Ubuntu:18.04:LTS: ruby2.5

An exploitable heap overflow vulnerability exists in the Psych::Emitter start_document function of Ruby. In Psych::Emitter start_document function heap buffer "head" allocation is made based on tags array length. Specially constructed object passed as element of tags array can increase this array size after mentioned allocation and cause heap overflow.