Lucene search
+L

913 matches found

SUSE CVE
SUSE CVE
•added 2025/11/14 12:33 a.m.•7 views

SUSE CVE-2025-13120

A vulnerability has been found in mruby up to 3.4.0. This vulnerability affects the function sortcmp of the file src/array.c. Such manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The name of the patch is...

5.5CVSS4.9AI score0.00146EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/11/13 6:31 p.m.•17 views

EUVD-2025-175315

A vulnerability has been found in mruby up to 3.4.0. This vulnerability affects the function sortcmp of the file src/array.c. Such manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The name of the patch is...

5.3CVSS5AI score0.00146EPSS
SaveExploits0References8
NVD
NVD
•added 2025/11/13 4:15 p.m.•25 views

CVE-2025-13120

A vulnerability has been found in mruby up to 3.4.0. This vulnerability affects the function sortcmp of the file src/array.c. Such manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The name of the patch is...

5.5CVSS0.00146EPSS
SaveExploits0References8
OSV
OSV
•added 2025/11/13 4:15 p.m.•22 views

UBUNTU-CVE-2025-13120

A vulnerability has been found in mruby up to 3.4.0. This vulnerability affects the function sortcmp of the file src/array.c. Such manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The name of the patch is...

5.5CVSS5.1AI score0.00146EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2025/11/13 3:32 p.m.•39 views

CVE-2025-13120 mruby array.c sort_cmp use after free

A vulnerability has been found in mruby up to 3.4.0. This vulnerability affects the function sortcmp of the file src/array.c. Such manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The name of the patch is...

5.3CVSS0.00146EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2025/11/13 3:32 p.m.•8 views

CVE-2025-13120 mruby array.c sort_cmp use after free

A vulnerability has been found in mruby up to 3.4.0. This vulnerability affects the function sortcmp of the file src/array.c. Such manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The name of the patch is...

5.3CVSS5AI score0.00146EPSS
SaveExploits0References8
CVE
CVE
•added 2025/11/13 3:32 p.m.•185 views

CVE-2025-13120

Summary : CVE-2025-13120 affects mruby up to 3.4.0, specifically the sort_cmp function in src/array.c, causing a use-after-free condition. Exploitation requires local access. A public patch is available (commit eb398971bfb43c38db3e04528b68ac9a7ce509bc). If CVE is relevant to you, apply the offici...

5.5CVSS5AI score0.00146EPSS
SaveExploits0References8Affected Software1
Debian CVE
Debian CVE
•added 2025/11/13 3:32 p.m.•15 views

CVE-2025-13120

A vulnerability has been found in mruby up to 3.4.0. This vulnerability affects the function sortcmp of the file src/array.c. Such manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The name of the patch is...

5.5CVSS5AI score0.00146EPSS
SaveExploits0
OSV
OSV
•added 2025/11/13 3:32 p.m.•17 views

CVE-2025-13120 mruby array.c sort_cmp use after free

A vulnerability has been found in mruby up to 3.4.0. This vulnerability affects the function sortcmp of the file src/array.c. Such manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The name of the patch is...

4.8CVSS5AI score
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/13 12:00 a.m.•3 views

CVE-2025-13120: Use After Free

A vulnerability has been found in mruby up to 3.4.0. This vulnerability affects the function sortcmp of the file src/array.c. Such manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The name of the patch is...

5.5CVSS4.8AI score0.00146EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/11/13 12:00 a.m.•16 views

PT-2025-46841

A vulnerability has been found in mruby up to 3.4.0. This vulnerability affects the function sort cmp of the file src/array.c. Such manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The name of the patch is...

5.3CVSS5.1AI score0.00146EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
•added 2025/11/13 12:00 a.m.•5 views

Linux Distros Unpatched Vulnerability : CVE-2025-13120

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been found in mruby up to 3.4.0. This vulnerability affects the function sortcmp of the file src/array.c. Such manipulation leads to use aft...

5.5CVSS5.3AI score0.00146EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/11/13 12:00 a.m.•22 views

mruby 资源管理错误漏洞

mruby is a lightweight implementation of the Ruby language open-sourced by makesoftwaresafe. A resource management error vulnerability exists in mruby 3.4.0 and earlier versions, which stems from a post-release reuse issue with the sortcmp function in the file src/array.c. The vulnerability is...

5.5CVSS5.3AI score0.00146EPSS
SaveExploits0References9
RubySec
RubySec
•added 2025/11/13 12:00 a.m.•15 views

Use-after-realloc vulnerablity in mruby 3.4.0

A vulnerability has been found in mruby up to 3.4.0. This vulnerability affects the function sortcmp of the file src/array.c. Such manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The name of the patch is...

5.5CVSS5AI score0.00146EPSS
SaveExploits0References1Affected Software1
Microsoft CVE
Microsoft CVE
•added 2025/11/11 1:01 a.m.•21 views

mruby array.c ary_fill_exec out-of-bounds write

...

7.8CVSS6.1AI score0.0016EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2025/11/11 12:40 a.m.•12 views

SUSE CVE-2025-12875

A weakness has been identified in mruby 3.4.0. This vulnerability affects the function aryfillexec of the file mrbgems/mruby-array-ext/src/array.c. Executing a manipulation of the argument start/length can lead to out-of-bounds write. The attack needs to be launched locally. The exploit has been...

7.8CVSS5.1AI score0.0016EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/11/10 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2025-12875

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weakness has been identified in mruby 3.4.0. This vulnerability affects the function aryfillexec of the file mrbgems/mruby-array-ext/src/array.c. Executing a...

7.8CVSS5.2AI score0.0016EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/11/08 8:59 p.m.•12 views

CVE-2025-12875

A weakness has been identified in mruby 3.4.0. This vulnerability affects the function aryfillexec of the file mrbgems/mruby-array-ext/src/array.c. Executing a manipulation of the argument start/length can lead to out-of-bounds write. The attack needs to be launched locally. The exploit has been...

7.8CVSS5.2AI score0.0016EPSS
SaveExploits0References1
OSV
OSV
•added 2025/11/07 9:15 p.m.•11 views

DEBIAN-CVE-2025-12875

A weakness has been identified in mruby 3.4.0. This vulnerability affects the function aryfillexec of the file mrbgems/mruby-array-ext/src/array.c. Executing manipulation of the argument start/length can lead to out-of-bounds write. The attack needs to be launched locally. The exploit has been ma...

5.3CVSS5.1AI score0.0016EPSS
SaveExploits0References1
NVD
NVD
•added 2025/11/07 9:15 p.m.•16 views

CVE-2025-12875

A weakness has been identified in mruby 3.4.0. This vulnerability affects the function aryfillexec of the file mrbgems/mruby-array-ext/src/array.c. Executing a manipulation of the argument start/length can lead to out-of-bounds write. The attack needs to be launched locally. The exploit has been...

7.8CVSS0.0016EPSS
SaveExploits0References8
Rows per page
Query Builder