CVE-2026-86547

mruby-c (mrubyc) through 4.0.0 contains a null pointer dereference in the op_enter() handler in src/vm.c when processing untrusted bytecode. An attacker can craft malicious .mrb bytecode files with OP_ENTER instructions at the top level to crash the embedding application, resulting in denial of s...