1186 matches found
WS-2019-0531
In mruby 2.1.0, there is a invalid read in localaddf in mrbgems/mruby-compiler/core/parse.y...
mruby:mruby_fuzzer: Crash in local_add_lv
Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5695723449876480 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzerasanmruby Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000003809 Crash State:...
mruby:mruby_fuzzer: Crash in yyparse
Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5652710828802048 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzerasanmruby Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000000059c3 Crash State:...
WS-2019-0548
mruby in versions thread-reference-20170716 to thread-reference-20180926 is vulnerable to Stack-buffer-overflow in IsStableUpdated , related to src/core/thread/networkdataleaderftd.cpp...
mruby/mruby_fuzzer: Use-of-uninitialized-value in ht_copy
Project: https://github.com/mruby/mruby.git Detailed report: https://oss-fuzz.com/testcase?key=5098398899765248 Project: mruby Fuzzer: libFuzzermrubyfuzzer Fuzz target binary: mrubyfuzzer Job Type: libfuzzermsanmruby Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...
mruby/mruby_fuzzer: Use-of-uninitialized-value in time_update_datetime
Project: https://github.com/mruby/mruby.git Detailed report: https://oss-fuzz.com/testcase?key=5642873585795072 Project: mruby Fuzzer: libFuzzermrubyfuzzer Fuzz target binary: mrubyfuzzer Job Type: libfuzzermsanmruby Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...
shopify-scripts: Buffer overflow in yywarning_s
PoC === The following demonstrates a crash: 300000000000000000000000000000000000000000000000E0030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 Debug...
shopify-scripts: Crash in mrb_ary_push
PoC === The following demonstrates a crash: def methodmissing end .00 %= begin0=0 00end Debug info ========== The crash happens in mrbarypush: 495│ mrbarypushmrbstate mrb, mrbvalue ary, mrbvalue elem 496│ 497│ struct RArray a = mrbaryptrary; 498├─ mrbint len = ARYLENa; gdb p a $1 = struct RArray...
Integer overflow
The CHECK macro in mrbgems/mruby-sprintf/src/sprintf.c in mruby 1.4.1 contains a signed integer overflow, possibly leading to out-of-bounds memory access because the mrbstrresize function in string.c does not check for a negative length...
UBUNTU-CVE-2018-14337
The CHECK macro in mrbgems/mruby-sprintf/src/sprintf.c in mruby 1.4.1 contains a signed integer overflow, possibly leading to out-of-bounds memory access because the mrbstrresize function in string.c does not check for a negative length...
DEBIAN-CVE-2018-14337
The CHECK macro in mrbgems/mruby-sprintf/src/sprintf.c in mruby 1.4.1 contains a signed integer overflow, possibly leading to out-of-bounds memory access because the mrbstrresize function in string.c does not check for a negative length...
CVE-2018-14337
The CHECK macro in mrbgems/mruby-sprintf/src/sprintf.c in mruby 1.4.1 contains a signed integer overflow, possibly leading to out-of-bounds memory access because the mrbstrresize function in string.c does not check for a negative length...
CVE-2018-14337
The CHECK macro in mrbgems/mruby-sprintf/src/sprintf.c in mruby 1.4.1 contains a signed integer overflow, possibly leading to out-of-bounds memory access because the mrbstrresize function in string.c does not check for a negative length...
CVE-2018-14337
The CHECK macro in mrbgems/mruby-sprintf/src/sprintf.c in mruby 1.4.1 contains a signed integer overflow, possibly leading to out-of-bounds memory access because the mrbstrresize function in string.c does not check for a negative length...
CVE-2018-14337
The CVE-2018-14337 issue affects mruby 1.4.1 where the CHECK macro in mrbgems/mruby-sprintf/src/sprintf.c can overflow a signed integer, potentially causing out-of-bounds memory access because mrb_str_resize does not check for a negative length. This is documented across multiple connected source...
CVE-2018-14337
The CHECK macro in mrbgems/mruby-sprintf/src/sprintf.c in mruby 1.4.1 contains a signed integer overflow, possibly leading to out-of-bounds memory access because the mrbstrresize function in string.c does not check for a negative length...
CVE-2018-14337
The CHECK macro in mrbgems/mruby-sprintf/src/sprintf.c in mruby 1.4.1 contains a signed integer overflow, possibly leading to out-of-bounds memory access because the mrbstrresize function in string.c does not check for a negative length...
CVE-2018-14337
The CHECK macro in mrbgems/mruby-sprintf/src/sprintf.c in mruby 1.4.1 contains a signed integer overflow, possibly leading to out-of-bounds memory access because the mrbstrresize function in string.c does not check for a negative length...
PT-2018-12452
Name of the Vulnerable Software and Affected Versions mruby version 1.4.1 Description The issue concerns a signed integer overflow in the CHECK macro within the mrbgems/mruby-sprintf/src/sprintf.c file of mruby. This overflow could potentially lead to out-of-bounds memory access due to the mrb st...
CVE-2018-14337: Integer Overflow or Wraparound
The CHECK macro in mrbgems/mruby-sprintf/src/sprintf.c in mruby 1.4.1 contains a signed integer overflow, possibly leading to out-of-bounds memory access because the mrbstrresize function in string.c does not check for a negative length...