PT-2026-88913

mrubyc through 4.0.0 contains a null pointer dereference vulnerability in the op enter handler in src/vm.c when processing untrusted bytecode. Attackers can craft malicious .mrb bytecode files with OP ENTER instructions at the top level to crash the embedding application and cause denial of servi...

UBUNTU-CVE-2018-12248

An issue was discovered in mruby 1.4.1. There is a heap-based buffer over-read associated with OPENTER because mrbgems/mruby-fiber/src/fiber.c does not extend the stack in cases of many arguments to fiber...