CVE-2022-1106

use after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...

mruby 资源管理错误漏洞

mruby is a lightweight implementation of the Ruby language. A security vulnerability exists in the GitHub repository mruby/mruby versions prior to 3.2, which stems from a heap buffer overflow in mrbvmexec in mruby/mruby. An attacker could exploit this vulnerability to execute arbitrary code...

CVE-2022-1106: Use After Free

use after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...

DEBIAN-CVE-2022-1071

User after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...

CVE-2022-1071

User after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...

CVE-2022-1071

User after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...

Design/Logic Flaw

User after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...

CVE-2022-1071

User after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...

UBUNTU-CVE-2022-1071

User after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...

CVE-2022-1071

User after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...

CVE-2022-1071 User after free in mrb_vm_exec in mruby/mruby

User after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...

CVE-2022-1071 User after free in mrb_vm_exec in mruby/mruby

User after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...

CVE-2022-1071

User after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...

CVE-2022-1071

CVE-2022-1071 affects mruby/mruby prior to 3.2. The issue is a use-after-free in mrb_vm_exec, as documented in multiple sources (e.g., NVD/NIST entry). CVSSv3.1/base scores indicate HIGH severity (8.2) with LOCAL exploitability, low privileges required, UI interaction required, and CHANGED scope,...

mruby 资源管理错误漏洞

mruby is a lightweight implementation of the Ruby language. A security vulnerability exists in mruby 3.1 and earlier, which stems from post-release reuse in mrbvmexec. No details of the vulnerability are provided at this time...

CVE-2022-1071: Use After Free

User after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...

User after free in mrb_vm_exec in mruby/mruby

User after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...

use after free in mrb_vm_exec

While fuzzing mruby I found a use after free in mruby compiled with ASAn. Proof of Concept uaf5.rb rb...

User after free in mrb_vm_exec

While fuzzing mruby I found a use after free in mruby compiled with ASAn. Proof of Concept uaf1.rb rb var1 = -0 var2 = 1.0 var3 = 1 var4 = +0 var3 = methods.groupby || var3 = methods.groupby || var3 = methods.groupby || var3 = methods.groupby || var3 = methods.groupby || var3 = methods.groupby ||...

mruby buffer overflow vulnerability (CNVD-2022-20682)

mruby is a lightweight implementation of the Ruby language. mruby suffers from a buffer overflow vulnerability that stems from the presence of null pointer dereference in mruby, which could be exploited by an attacker to crash the mruby interpreter, thereby impacting system availability...