CVE-2024-27280

A buffer-overread issue was discovered in StringIO 3.0.1, as distributed in Ruby 3.0.x through 3.0.6 and 3.1.x through 3.1.4. The ungetbyte and ungetc methods on a StringIO can read past the end of a string, and a subsequent call to StringIO.gets may return the memory value. 3.0.3 is the main fixed version; however, for Ruby 3.0 users, a fixed version is stringio 3.0.1.1, and for Ruby 3.1 users, a fixed version is stringio 3.0.1.2.

• CWE-120

• https://hackerone.com/reports/1399856
• https://www.ruby-lang.org/en/news/2024/03/21/buffer-overread-cve-2024-27280/
• http://seclists.org/fulldisclosure/2025/Sep/53
• http://seclists.org/fulldisclosure/2025/Sep/54
• http://seclists.org/fulldisclosure/2025/Sep/55
• https://hackerone.com/reports/1399856
• https://lists.debian.org/debian-lts-announce/2024/09/msg00000.html
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/27LUWREIFTP3MQAW7QE4PJM4DPAQJWXF/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XYDHPHEZI7OQXTQKTDZHGZNPIJH7ZV5N/
• https://security.netapp.com/advisory/ntap-20250502-0003/
• https://www.ruby-lang.org/en/news/2024/03/21/buffer-overread-cve-2024-27280/

Published

May 14, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-27273IBM AIX's Unix domain (AIX 7.2, 7.3, VIOS 3.1, and VIOS 4.1)…7.8
• CVE-2024-27275IBM i 7.2, 7.3, 7.4, and 7.5 contains a local privilege esca…7.8
• CVE-2024-27277The private key for the IBM Storage Protect Plus Server 10.1…5.5
• CVE-2024-27278OpenPNE Plugin "opTimelinePlugin" 1.2.11 and earlier contain…5.4
• CVE-2024-27279Directory traversal vulnerability exists in a-blog cms Ver.3…6.5
• CVE-2024-2728Information exposure vulnerability in the CIGESv2 system. Th…5.5
• CVE-2024-27281An issue was discovered in RDoc 6.3.3 through 6.6.2, as dist…4.5
• CVE-2024-27282An issue was discovered in Ruby 3.x through 3.3.0. If attack…6.6
• CVE-2024-27283A vulnerability was discovered in Veritas eDiscovery Platfor…7.2
• CVE-2024-27284cassandra-rs is a Cassandra (CQL) driver for Rust. Code that…7.5
• CVE-2024-27285YARD is a Ruby Documentation tool. The "frames.html" file wi…6.1
• CVE-2024-27286Zulip is an open-source team collaboration tool. When a user…6.5