Process crash via String-to-Float buffer over-read

Buffer over-read in affected Ruby releases allows attackers to crash processes through crafted String-to-Float conversions. An undisclosed internal conversion function reads beyond its buffer when Kernel#Float or String#to_f processes a crafted string. Reachability requires an application to pass attacker-controlled text into an affected conversion path; the result is usually a segmentation fault and, in limited circumstances, an illegal memory read.