Intel

AIKIDO-2026-10277

numo-narray-alt is vulnerable to Out-of-bounds Read

Out-of-bounds Read Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
Published Mar 2, 2026

57

Medium Risk

This Affects:

RUBYnumo-narray-alt
0.0.1 - 0.10.2
Fixed in 0.10.3
Are you affected? Scan for Free

TL;DR

Affected versions of this package are vulnerable to an out-of-bounds memory access during array indexing operations. When certain multi-dimensional indexing patterns are used, the parser could read past the end of internal stride/index tables, potentially causing undefined behavior, crashes, or denial-of-service conditions. The issue is fixed by adding proper boundary checks before accessing internal index data, ensuring that invalid dimension indexes do not lead to unsafe memory reads.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range.

Background info

numo-narray-alt is vulnerable to Out-of-bounds Read in versions 0.0.1 - 0.10.2.

How to fix this

Upgrade the numo-narray-alt library to the patch version.