Mruby

Mruby

42 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2026-1979

Exploit
  • EPSS 0.01%
  • Veröffentlicht 06.02.2026 04:32:09
  • Zuletzt bearbeitet 06.02.2026 15:14:47

A flaw has been found in mruby up to 3.4.0. This affects the function mrb_vm_exec of the file src/vm.c of the component JMPNOT-to-JMPIF Optimization. Executing a manipulation can lead to use after free. The attack needs to be launched locally. The ex...

5.5

CVE-2025-13120

Exploit
  • EPSS 0.02%
  • Veröffentlicht 13.11.2025 15:32:07
  • Zuletzt bearbeitet 04.12.2025 15:27:29

A vulnerability has been found in mruby up to 3.4.0. This vulnerability affects the function sort_cmp of the file src/array.c. Such manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the pu...

7.8

CVE-2025-12875

Exploit
  • EPSS 0.02%
  • Veröffentlicht 07.11.2025 20:32:07
  • Zuletzt bearbeitet 02.12.2025 16:15:18

A weakness has been identified in mruby 3.4.0. This vulnerability affects the function ary_fill_exec of the file mrbgems/mruby-array-ext/src/array.c. Executing manipulation of the argument start/length can lead to out-of-bounds write. The attack need...

5.5

CVE-2025-7207

Exploit
  • EPSS 0.03%
  • Veröffentlicht 09.07.2025 00:02:07
  • Zuletzt bearbeitet 01.10.2025 20:32:54

A vulnerability, which was classified as problematic, was found in mruby up to 3.4.0-rc2. Affected is the function scope_new of the file mrbgems/mruby-compiler/core/codegen.c of the component nregs Handler. The manipulation leads to heap-based buffer...

7.5

CVE-2021-46023

Exploit
  • EPSS 0.12%
  • Veröffentlicht 14.02.2023 16:15:11
  • Zuletzt bearbeitet 20.03.2025 21:15:13

An Untrusted Pointer Dereference was discovered in function mrb_vm_exec in mruby before 3.1.0-rc. The vulnerability causes a segmentation fault and application crash.

7.8

CVE-2022-1934

Exploit
  • EPSS 0.14%
  • Veröffentlicht 31.05.2022 03:15:08
  • Zuletzt bearbeitet 21.11.2024 06:41:47

Use After Free in GitHub repository mruby/mruby prior to 3.2.

7.8

CVE-2022-1427

Exploit
  • EPSS 0.24%
  • Veröffentlicht 23.04.2022 00:15:08
  • Zuletzt bearbeitet 21.11.2024 06:40:42

Out-of-bounds Read in mrb_obj_is_kind_of in in GitHub repository mruby/mruby prior to 3.2. # Impact: Possible arbitrary code execution if being exploited.

9.8

CVE-2022-1286

Exploit
  • EPSS 0.59%
  • Veröffentlicht 10.04.2022 11:15:07
  • Zuletzt bearbeitet 21.11.2024 06:40:24

heap-buffer-overflow in mrb_vm_exec in mruby/mruby in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited.

9.8

CVE-2022-1276

Exploit
  • EPSS 0.84%
  • Veröffentlicht 10.04.2022 10:15:07
  • Zuletzt bearbeitet 21.11.2024 06:40:23

Out-of-bounds Read in mrb_get_args in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited.

9.8

CVE-2022-1212

Exploit
  • EPSS 0.33%
  • Veröffentlicht 05.04.2022 04:15:08
  • Zuletzt bearbeitet 21.11.2024 06:40:16

Use-After-Free in str_escape in mruby/mruby in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited.