CVE-2026-54592: Ruby C Ext Unrestored Pointer Incrementcve-2026-54592-ruby-c-ext-unrestored-pointer-increment
Pointer or depth index `$DOC->$WHERE` is incremented prior to invoking `rb_yield` without state restoration (`$DOC->$WHERE--`) or depth bounds checking. When invoked recursively inside callback blocks, this can cause state pointer corruption and stack buffer overflow.