CVE-2026-79769: Ruby C Ext Missing Type Check Before Node Unwrap

Ruby C extension method unwraps a Ruby object argument into a C struct without verifying its type via `rb_obj_is_kind_of`, potentially leading to type confusion and out-of-bounds memory access.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0C
greprules fetch cve-2026-79769-ruby-c-ext-missing-type-check-before-node-unwrap --engine opengrep

Description

Ruby C extension method unwraps a Ruby object argument into a C struct without verifying its type via `rb_obj_is_kind_of`, potentially leading to type confusion and out-of-bounds memory access.