CVE-2021-46020

An untrusted pointer dereference in mrbvmexec of mruby v3.0.0 can lead to a segmentation fault or application crash...

PT-2022-12506

Name of the Vulnerable Software and Affected Versions mruby version 3.0.0 Description The issue is related to an untrusted pointer dereference in the mrb vm exec function, which can cause a segmentation fault or application crash. Recommendations For mruby version 3.0.0, at the moment, there is n...

PT-2021-27850

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description A heap-buffer-overflow WRITE 8 crash has been reported. The crash occurs in the following functions: mrb vm exec, mrb vm run, mrb top run. Recommendations...

Heap-based Buffer Overflow in mruby/mruby

Description Heap buffer overflow on mrb-vm-exec Proof of Concept // poc.rb 1.timesuntil% ;break Result ./mruby poc.rb ================================================================= ==1451==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x6020000023d9 at pc 0x55b2fc3f1046 bp...

PT-2021-27799

Name of the Vulnerable Software and Affected Versions Mruby affected versions not specified Description The issue is related to a heap-buffer-overflow read. Technical details about the crash include the mrb vm exec, mrb vm run, and mrb top run functions. Recommendations At the moment, there is no...

PT-2021-27752

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN WRITE. The crash state involves several functions: mrb vm exec, mrb vm run, and mrb top run. No informati...

PT-2021-27665

Name of the Vulnerable Software and Affected Versions: Mruby affected versions not specified Description: The issue is related to a heap-buffer-overflow read. Technical details about the crash include the mrb vm exec, mrb vm run, and mrb top run functions. Recommendations: At the moment, there is...

PT-2021-28326

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 4 crash has been reported. The crash occurs in the following functions: mrb vm exec, mrb vm run, mrb top run. Recommendations...

PT-2021-28328

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash has been reported with a type of UNKNOWN READ. The crash state includes functions such as mrb vm ci env, cipop, and mrb vm exec. No information i...

PT-2021-28300

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by a negative-size-param, which occurs in the mrb str format function, called by mrb f sprintf and mrb vm exec...

PT-2021-28277

Name of the Vulnerable Software and Affected Versions: MRuby affected versions not specified Description: The issue is related to a crash caused by an unknown read. Technical details about the crash include the involvement of specific functions such as mrb ary shift m, mrb vm exec, and mrb vm run...

PT-2020-22248

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of Use-of-uninitialized-value. The crash state involves several functions: ht copy, mrb hash dup, and mrb vm exec. No...

PT-2018-9744

Name of the Vulnerable Software and Affected Versions: mruby versions prior to 1.4.1 Description: The issue is related to an integer overflow in the mrb vm exec function when handling OP GETUPVAR in the presence of deep scope nesting, resulting in a use-after-free. This could allow an attacker wh...