MRuby resource management error vulnerability

mruby is a lightweight implementation of the Ruby language open-sourced by makesoftwaresafe. A resource management error vulnerability exists in mruby 3.4.0 and earlier versions, which stems from a post-release reuse issue with the sortcmp function in the file src/array.c. The vulnerability is...

PT-2025-46841

A vulnerability has been found in mruby up to 3.4.0. This vulnerability affects the function sort cmp of the file src/array.c. Such manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The name of the patch is...