Mruby

A flaw has been found in mruby up to 3.4.0. This affects the function mrb_vm_exec of the file src/vm.c of the component JMPNOT-to-JMPIF Optimization. Executing a manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been published and may be used. This patch is called e50f15c1c6e131fa7934355eb02b8173b13df415. It is advisable to implement a patch to correct this issue.

Published: 2026-02-06T04:32:09.200Z
Updated: 2026-02-23T09:21:06.088Z

A vulnerability has been found in mruby up to 3.4.0. This vulnerability affects the function sort_cmp of the file src/array.c. Such manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The name of the patch is eb398971bfb43c38db3e04528b68ac9a7ce509bc. It is advisable to implement a patch to correct this issue.

Published: 2025-11-13T15:32:07.825Z
Updated: 2026-03-04T15:06:08.865Z

A weakness has been identified in mruby 3.4.0. This vulnerability affects the function ary_fill_exec of the file mrbgems/mruby-array-ext/src/array.c. Executing a manipulation of the argument start/length can lead to out-of-bounds write. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. This patch is called 93619f06dd378db6766666b30c08978311c7ec94. It is best practice to apply a patch to resolve this issue.

Published: 2025-11-07T20:32:07.100Z
Updated: 2026-02-24T06:25:01.873Z

Use After Free in GitHub repository mruby/mruby prior to 3.2.

Published: 2022-05-31T02:20:12.000Z
Updated: 2024-08-03T00:24:42.561Z

heap-buffer-overflow in mrb_vm_exec in mruby/mruby in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited.

Published: 2022-04-10T10:40:09.000Z
Updated: 2024-08-02T23:55:24.606Z