Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-11177
HistoryFeb 16, 2022 - 12:00 a.m.

mruby buffer overflow vulnerability (CNVD-2022-11177)

2022-02-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
12
mruby
buffer overflow
vulnerability
heap overflow
mrb_f_send
arbitrary code
cnvd-2022-11177

EPSS

0.002

Percentile

61.8%

mruby is a lightweight implementation of the Ruby language. buffer overflow exists in versions of Mruby prior to 3.2, and the vulnerability stems from a heap overflow in mrb_f_send(). An attacker could exploit this vulnerability to execute arbitrary code.