Lucene search
K

14 matches found

RedhatCVE
RedhatCVE
added 2026/02/07 7:22 a.m.3 views

CVE-2026-1979

A flaw has been found in mruby up to 3.4.0. This affects the function mrbvmexec of the file src/vm.c of the component JMPNOT-to-JMPIF Optimization. Executing a manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been published and may be used. This...

5.5CVSS5AI score0.00027EPSS
Exploits1References1
OSV
OSV
added 2026/02/06 5:16 a.m.3 views

CVE-2026-1979

A flaw has been found in mruby up to 3.4.0. This affects the function mrbvmexec of the file src/vm.c of the component JMPNOT-to-JMPIF Optimization. Executing a manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been published and may be used. This...

5.5CVSS5.1AI score
Exploits0References7
ATTACKERKB
ATTACKERKB
added 2026/02/06 4:32 a.m.4 views

CVE-2026-1979

A flaw has been found in mruby up to 3.4.0. This affects the function mrbvmexec of the file src/vm.c of the component JMPNOT-to-JMPIF Optimization. Executing a manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been published and may be used. This...

5.3CVSS4.8AI score0.00027EPSS
Exploits1References7
CNNVD
CNNVD
added 2026/02/06 12:0 a.m.4 views

mruby 资源管理错误漏洞

MRuby is a lightweight implementation of the Ruby language, developed by Makesoftwaresafe as open source. Versions of MRuby 3.4.0 and earlier contain a resource management vulnerability. This vulnerability stems from a flaw in the mrbvmexec function in the src/vm.c file within the JMPNOT-to-JMPIF...

5.5CVSS6AI score0.00027EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2026/02/06 12:0 a.m.5 views

PT-2026-6673

Name of the Vulnerable Software and Affected Versions mruby versions up to 3.4.0 Description A flaw exists in mruby up to version 3.4.0 related to the JMPNOT-to-JMPIF Optimization component. The issue resides within the mrb vm exec function in the src/vm.c file and can lead to a use-after-free...

5.5CVSS5.1AI score0.00027EPSS
Exploits1References20
Tenable Nessus
Tenable Nessus
added 2025/08/26 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2022-1106

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - use after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2. CVE-2022-1106 Note that Nessus relies on the presence of the package as reported by t...

9.1CVSS7.1AI score0.00142EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2024/02/15 12:0 a.m.3 views

PT-2024-40558 · Git +1 · Mruby

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A heap-buffer-overflow READ 2 crash has been reported. The crash involves the following functions: mrb memsearch, mrb str split m, and mrb vm exec...

7AI score
Exploits0References2
Positive Technologies
Positive Technologies
added 2022/11/11 12:0 a.m.2 views

PT-2022-36762 · Git +1 · Mruby

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by a negative-size-param, which occurs in the mrb str format function, followed by mrb f sprintf and mrb vm exec. ...

6.9AI score
Exploits0References2
Positive Technologies
Positive Technologies
added 2022/11/10 12:0 a.m.3 views

PT-2022-36760 · Git +1 · Mruby

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A crash occurred due to an unknown read issue. The crash state includes functions such as pack unpack, mrb pack unpack, and mrb vm exec. Recommendations: At the moment, there is no...

6.8AI score
Exploits0References2
OSV
OSV
added 2022/04/10 11:15 a.m.2 views

UBUNTU-CVE-2022-1286

heap-buffer-overflow in mrbvmexec in mruby/mruby in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited...

9.8CVSS6.3AI score0.00586EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2022/04/02 12:0 a.m.2 views

PT-2022-13708 · Mruby +1 · Mruby +1

Name of the Vulnerable Software and Affected Versions: mruby versions prior to 3.2 Description: The issue is related to a NULL Pointer Dereference in mrb vm exec with super, which can cause the mruby interpreter to crash. This affects the availability of the system. Recommendations: For versions...

7.1CVSS6.3AI score0.00133EPSS
Exploits1References14
OSV
OSV
added 2022/03/27 2:15 p.m.0 views

UBUNTU-CVE-2022-1106

use after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...

9.1CVSS7.1AI score0.00142EPSS
Exploits1References4
CNNVD
CNNVD
added 2022/03/26 12:0 a.m.1 views

mruby 资源管理错误漏洞

mruby is a lightweight implementation of the Ruby language. A security vulnerability exists in mruby 3.1 and earlier, which stems from post-release reuse in mrbvmexec. No details of the vulnerability are provided at this time...

8.2CVSS5.5AI score0.00237EPSS
Exploits1References3
Huntr
Huntr
added 2021/09/26 1:48 a.m.15 views

Heap-based Buffer Overflow in mruby/mruby

Description Heap buffer overflow on mrb-vm-exec Proof of Concept // poc.rb 1.timesuntil% ;break Result ./mruby poc.rb ================================================================= ==1451==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x6020000023d9 at pc 0x55b2fc3f1046 bp...

Exploits0
Rows per page
Query Builder