Mruby

Mruby

42 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.5

CVE-2026-1979

Exploit
  • EPSS 0.02%
  • Veröffentlicht 06.02.2026 04:32:09
  • Zuletzt bearbeitet 28.02.2026 00:33:39

A flaw has been found in mruby up to 3.4.0. This affects the function mrb_vm_exec of the file src/vm.c of the component JMPNOT-to-JMPIF Optimization. Executing a manipulation can lead to use after free. The attack needs to be launched locally. The ex...

5.5

CVE-2025-13120

Exploit
  • EPSS 0.02%
  • Veröffentlicht 13.11.2025 15:32:07
  • Zuletzt bearbeitet 24.02.2026 07:16:43

A vulnerability has been found in mruby up to 3.4.0. This vulnerability affects the function sort_cmp of the file src/array.c. Such manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the pu...

7.8

CVE-2025-12875

Exploit
  • EPSS 0.02%
  • Veröffentlicht 07.11.2025 20:32:07
  • Zuletzt bearbeitet 24.02.2026 07:16:41

A weakness has been identified in mruby 3.4.0. This vulnerability affects the function ary_fill_exec of the file mrbgems/mruby-array-ext/src/array.c. Executing a manipulation of the argument start/length can lead to out-of-bounds write. The attack ne...

5.5

CVE-2025-7207

Exploit
  • EPSS 0.04%
  • Veröffentlicht 09.07.2025 00:02:07
  • Zuletzt bearbeitet 01.10.2025 20:32:54

A vulnerability, which was classified as problematic, was found in mruby up to 3.4.0-rc2. Affected is the function scope_new of the file mrbgems/mruby-compiler/core/codegen.c of the component nregs Handler. The manipulation leads to heap-based buffer...

7.5

CVE-2021-46023

Exploit
  • EPSS 0.38%
  • Veröffentlicht 14.02.2023 16:15:11
  • Zuletzt bearbeitet 20.03.2025 21:15:13

An Untrusted Pointer Dereference was discovered in function mrb_vm_exec in mruby before 3.1.0-rc. The vulnerability causes a segmentation fault and application crash.

7.8

CVE-2022-1934

Exploit
  • EPSS 0.07%
  • Veröffentlicht 31.05.2022 03:15:08
  • Zuletzt bearbeitet 21.11.2024 06:41:47

Use After Free in GitHub repository mruby/mruby prior to 3.2.

7.8

CVE-2022-1427

Exploit
  • EPSS 0.24%
  • Veröffentlicht 23.04.2022 00:15:08
  • Zuletzt bearbeitet 21.11.2024 06:40:42

Out-of-bounds Read in mrb_obj_is_kind_of in in GitHub repository mruby/mruby prior to 3.2. # Impact: Possible arbitrary code execution if being exploited.

9.8

CVE-2022-1286

Exploit
  • EPSS 1.36%
  • Veröffentlicht 10.04.2022 11:15:07
  • Zuletzt bearbeitet 21.11.2024 06:40:24

heap-buffer-overflow in mrb_vm_exec in mruby/mruby in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited.

9.8

CVE-2022-1276

Exploit
  • EPSS 0.8%
  • Veröffentlicht 10.04.2022 10:15:07
  • Zuletzt bearbeitet 21.11.2024 06:40:23

Out-of-bounds Read in mrb_get_args in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited.

9.8

CVE-2022-1212

Exploit
  • EPSS 0.33%
  • Veröffentlicht 05.04.2022 04:15:08
  • Zuletzt bearbeitet 21.11.2024 06:40:16

Use-After-Free in str_escape in mruby/mruby in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited.