PT-2026-6673

Name of the Vulnerable Software and Affected Versions mruby versions up to 3.4.0 Description A flaw exists in mruby up to version 3.4.0 related to the JMPNOT-to-JMPIF Optimization component. The issue resides within the mrb vm exec function in the src/vm.c file and can lead to a use-after-free...

Heap-Use-after-Free vulnerability in mruby's mrb_vm_exec function

A flaw has been found in mruby up to 3.4.0. This affects the function mrbvmexec of the file src/vm.c of the component JMPNOT-to-JMPIF Optimization. Executing a manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been published and may be used. This...

mruby 资源管理错误漏洞

MRuby is a lightweight implementation of the Ruby language, developed by Makesoftwaresafe as open source. Versions of MRuby 3.4.0 and earlier contain a resource management vulnerability. This vulnerability stems from a flaw in the mrbvmexec function in the src/vm.c file within the JMPNOT-to-JMPIF...

Linux Distros Unpatched Vulnerability : CVE-2026-1979

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw has been found in mruby up to 3.4.0. This affects the function mrbvmexec of the file src/vm.c of the component JMPNOT-to-JMPIF Optimization. Executing a...

CVE-2018-12247

An issue was discovered in mruby 1.4.1. There is a NULL pointer dereference in mrbclass, related to certain .clone usage, because mrbobjclone in kernel.c copies flags other than the MRBFLAGISFROZEN flag e.g., the embedded flag...

CVE-2018-12248

An issue was discovered in mruby 1.4.1. There is a heap-based buffer over-read associated with OPENTER because mrbgems/mruby-fiber/src/fiber.c does not extend the stack in cases of many arguments to fiber...

CVE-2022-0481

NULL Pointer Dereference in Homebrew mruby prior to 3.2...

CVE-2022-0717

Out-of-bounds Read in GitHub repository mruby/mruby prior to 3.2...

CVE-2022-0326

NULL Pointer Dereference in Homebrew mruby prior to 3.2...

CVE-2022-0632

NULL Pointer Dereference in Homebrew mruby prior to 3.2...

CVE-2022-0623

Out-of-bounds Read in Homebrew mruby prior to 3.2...

CVE-2022-0240

mruby is vulnerable to NULL Pointer Dereference...

CVE-2022-0614

Use of Out-of-range Pointer Offset in Homebrew mruby prior to 3.2...

CVE-2022-0080

mruby is vulnerable to Heap-based Buffer Overflow...

CVE-2022-0525

Out-of-bounds Read in Homebrew mruby prior to 3.2...

CVE-2022-0570

Heap-based Buffer Overflow in Homebrew mruby prior to 3.2...

CVE-2025-13120

A vulnerability has been found in mruby up to 3.4.0. This vulnerability affects the function sortcmp of the file src/array.c. Such manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The name of the patch is...

CVE-2025-13397

CVE-2025-13397 affects mrubyc up to version 3.4, specifically the mrbc_raw_realloc function in src/alloc.c. The issue stems from manipulating the argument ptr, causing a null pointer dereference. The advisory notes a local attack vector and points to a patch identified as 009111904807b8567262036b...

mruby array.c sort_cmp use after free

...

mruby/c 代码问题漏洞

mruby/c is a C language library in the ITOC mruby/c team.open source. A code issue vulnerability exists in mruby/c version 3.4 and earlier, which stems from improper manipulation of the parameter ptr to function mrbcrawrealloc in file src/alloc.c, which may result in a null pointer dereference...