CVE-2022-1071

2022-03-2604:15:09

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.9%

JSON

User after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3.2.

CPENameOperatorVersion
mrubyeq1.0.0
mrubyeq3.0.0-preview
mrubyeq2.1.1
mrubyeq1.1.0
mrubyeq2.1.2-rc
mrubyeq2.1.2-rc2
mrubyeq1.2.0
mrubyeq3.0.0
mrubyeq1.4.0
mrubyeq2.1.0-rc

Name	Operator	Version
mruby	eq	1.0.0
mruby	eq	3.0.0-preview
mruby	eq	2.1.1
mruby	eq	1.1.0
mruby	eq	2.1.2-rc
mruby	eq	2.1.2-rc2
mruby	eq	1.2.0
mruby	eq	3.0.0
mruby	eq	1.4.0
mruby	eq	2.1.0-rc

Rows per page:

1-10 of 191

References

github.com/mruby/mruby/commit/aaa28a508903041dd7399d4159a8ace9766b022f

huntr.dev/bounties/6597ece9-07af-415b-809b-919ce0a17cf3