CVE-2022-1286 heap-buffer-overflow in mrb_vm_exec in mruby/mruby in mruby/mruby

2022-04-1010:40:09

CWE-122

@huntrdev

www.cve.org

cve-2022-1286

heap-buffer-overflow

mrb_vm_exec

mruby/mruby

github

arbitrary code execution

CVSS3

5.9

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS

0.002

Percentile

61.3%

JSON

heap-buffer-overflow in mrb_vm_exec in mruby/mruby in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited.

CNA Affected

[
  {
    "product": "mruby/mruby",
    "vendor": "mruby",
    "versions": [
      {
        "lessThan": "3.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]