GCVE - cpe:2.3:a:mruby:mruby:1.4.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mruby:mruby:1.4.1:*:*:*:*:*:*:*

part: a version: 1.4.1 update: *

Vendor	Mruby (`9cbf21a3-c0af-5fbb-8b39-9d374f90b914`)
Product	Mruby (`b620d953-6199-51f2-9d31-59ebbe2a5cce`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/mruby`	purl2cpe	2026-06-01 10:18:11.078070
`pkg:deb/ubuntu/mruby`	purl2cpe	2026-06-01 10:18:11.078071
`pkg:github/mruby/mruby`	purl2cpe	2026-06-01 10:18:11.078073
`pkg:rpm/opensuse/mruby`	purl2cpe	2026-06-01 10:18:11.078075

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-14337`	vulnerable	2026-06-08 05:10:52.783236	Details available The CHECK macro in mrbgems/mruby-sprintf/src/sprintf.c in mruby 1.4.1 contains a signed integer overflow, possibly leading to out-of-bounds memory access because the mrb_str_resize function in string.c does not check for a negative length. Published: 2018-07-17T03:00:00.000Z Updated: 2024-08-05T09:21:41.601Z Open on db.gcve.eu Reference links https://github.com/mruby/mruby/issues/4062 https://lists.debian.org/debian-lts-announce/2022/05/msg00006.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-12249`	vulnerable	2026-06-08 05:10:41.321673	Details available An issue was discovered in mruby 1.4.1. There is a NULL pointer dereference in mrb_class_real because "class BasicObject" is not properly supported in class.c. Published: 2018-06-12T14:00:00.000Z Updated: 2024-08-05T08:30:59.698Z Open on db.gcve.eu Reference links https://github.com/mruby/mruby/issues/4037 https://github.com/mruby/mruby/commit/faa4eaf6803bd11669bc324b4c34e7162286bfa3 https://lists.debian.org/debian-lts-announce/2022/05/msg00006.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-12248`	vulnerable	2026-06-08 05:10:41.321340	Details available An issue was discovered in mruby 1.4.1. There is a heap-based buffer over-read associated with OP_ENTER because mrbgems/mruby-fiber/src/fiber.c does not extend the stack in cases of many arguments to fiber. Published: 2018-06-12T14:00:00.000Z Updated: 2024-09-16T16:43:26.889Z Open on db.gcve.eu Reference links https://github.com/mruby/mruby/issues/4038 https://github.com/mruby/mruby/commit/778500563a9f7ceba996937dc886bd8cde29b42b	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-12247`	vulnerable	2026-06-08 05:10:41.321010	Details available An issue was discovered in mruby 1.4.1. There is a NULL pointer dereference in mrb_class, related to certain .clone usage, because mrb_obj_clone in kernel.c copies flags other than the MRB_FLAG_IS_FROZEN flag (e.g., the embedded flag). Published: 2018-06-12T14:00:00.000Z Updated: 2024-09-16T20:03:15.672Z Open on db.gcve.eu Reference links https://github.com/mruby/mruby/issues/4036 https://github.com/mruby/mruby/commit/55edae0226409de25e59922807cb09acb45731a2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-11743`	vulnerable	2026-06-08 05:10:38.884558	Details available The init_copy function in kernel.c in mruby 1.4.1 makes initialize_copy calls for TT_ICLASS objects, which allows attackers to cause a denial of service (mrb_hash_keys uninitialized pointer and application crash) or possibly have unspecified other impact. Published: 2018-06-05T13:00:00.000Z Updated: 2024-08-05T08:17:09.164Z Open on db.gcve.eu Reference links https://github.com/mruby/mruby/commit/b64ce17852b180dfeea81cf458660be41a78974d https://github.com/mruby/mruby/issues/4027 https://lists.debian.org/debian-lts-announce/2022/05/msg00006.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.