TI-2022-00033 CVE-2022-0080 · GHSA-8vcc-hrhr-q8hf
Heap-based Buffer Overflow in mruby/mruby
Priority HIGH 75
mruby is vulnerable to Heap-based Buffer Overflow
mruby
Records42All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical17CVSS 9.0–10.0
CVSS high16CVSS 7.0–8.9
Exploited now
mruby records in CISA KEVNo mruby vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
42 records in Mruby · all components
TI-2026-01636 CVE-2026-1979 · GHSA-gxgq-rpmr-r8xr
mruby JMPNOT-to-JMPIF Optimization vm.c mrb_vm_exec use after free
Priority MEDIUM 55
A flaw has been found in mruby up to 3.4.0.
TI-2025-11794 CVE-2025-12875 · GHSA-q269-xqww-45mm
mruby array.c ary_fill_exec out-of-bounds write
Priority MEDIUM 55
A weakness has been identified in mruby 3.4.0.
TI-2025-06567 CVE-2025-7207 · GHSA-48pr-6hvf-39v3
mruby nregs codegen.c scope_new heap-based overflow
Priority MEDIUM 55
A vulnerability, which was classified as problematic, was found in mruby up to 3.4.0-rc2.
TI-2018-07224 CVE-2018-10191 · GHSA-444w-xm89-r2p5
In versions of mruby up to and including 1.4.0, an integer overflow exists in…
Priority MEDIUM 47
In versions of mruby up to and including 1.4.0, an integer overflow exists in src/vm.c::mrb_vm_exec() when handling OP_GETUPVAR in the presence of deep scope nesting, resulting in a use-after-free.
TI-2022-01100 CVE-2022-1212 · GHSA-xh66-6mj6-94rg
Use-After-Free in str_escape in mruby/mruby in mruby/mruby
Priority MEDIUM 46
Use-After-Free in str_escape in mruby/mruby in GitHub repository mruby/mruby prior to 3.2.
TI-2020-12486 CVE-2020-15866 · GHSA-4f9x-p86g-x88m
mruby through 2.1.2-rc has a heap-based buffer overflow in the mrb_yield_with_class…
Priority MEDIUM 46
mruby through 2.1.2-rc has a heap-based buffer overflow in the mrb_yield_with_class function in vm.c because of incorrect VM stack handling.
TI-2018-08404 CVE-2018-11743 · GHSA-7w9j-h3hj-wc9g
The init_copy function in kernel.c in mruby 1.4.1 makes initialize_copy calls for…
Priority MEDIUM 46
The init_copy function in kernel.c in mruby 1.4.1 makes initialize_copy calls for TT_ICLASS objects, which allows attackers to cause a denial of service (mrb_hash_keys uninitialized pointer and application crash) or poss…
TI-2018-07232 CVE-2018-10199 · GHSA-xpq9-m45f-g29q
In versions of mruby up to and including 1.4.0, a use-after-free vulnerability exists in…
Priority MEDIUM 46
In versions of mruby up to and including 1.4.0, a use-after-free vulnerability exists in src/io.c::File#initilialize_copy().
TI-2022-01160 CVE-2022-1276 · GHSA-66hc-pc5r-hwjr
Out-of-bounds Read in mrb_get_args in mruby/mruby
Priority MEDIUM 45
Out-of-bounds Read in mrb_get_args in GitHub repository mruby/mruby prior to 3.2.
TI-2020-05547 CVE-2020-6840 · GHSA-4v2f-5xhv-8ff4
In mruby 2.1.0, there is a use-after-free in hash_slice in mrbgems/mruby-hash-ext/src/hash-ext.c.
Priority MEDIUM 45
In mruby 2.1.0, there is a use-after-free in hash_slice in mrbgems/mruby-hash-ext/src/hash-ext.c.
TI-2020-05546 CVE-2020-6839 · GHSA-24vp-v896-cq3c
In mruby 2.1.0, there is a stack-based buffer overflow in mrb_str_len_to_dbl in string.c.
Priority MEDIUM 45
In mruby 2.1.0, there is a stack-based buffer overflow in mrb_str_len_to_dbl in string.c.
TI-2020-05545 CVE-2020-6838 · GHSA-97qv-pm76-mg98
In mruby 2.1.0, there is a use-after-free in hash_values_at in mrbgems/mruby-hash-ext/src/hash-ext.c.
Priority MEDIUM 45
In mruby 2.1.0, there is a use-after-free in hash_values_at in mrbgems/mruby-hash-ext/src/hash-ext.c.
TI-2022-01170 CVE-2022-1286 · GHSA-6c7w-5xfj-j2mc
heap-buffer-overflow in mrb_vm_exec in mruby/mruby in mruby/mruby
Priority MEDIUM 44
heap-buffer-overflow in mrb_vm_exec in mruby/mruby in GitHub repository mruby/mruby prior to 3.2.
TI-2022-00548 CVE-2022-0631 · GHSA-hv83-f8w5-chhv
Heap-based Buffer Overflow in mruby/mruby
Priority MEDIUM 44
Heap-based Buffer Overflow in Homebrew mruby prior to 3.2.
TI-2022-00488 CVE-2022-0570 · GHSA-69j8-4j47-xjj7
Heap-based Buffer Overflow in mruby/mruby
Priority MEDIUM 44
Heap-based Buffer Overflow in Homebrew mruby prior to 3.2.
TI-2022-00540 CVE-2022-0623 · GHSA-ff35-7f56-3w6p
Out-of-bounds Read in mruby/mruby
Priority MEDIUM 43
Out-of-bounds Read in Homebrew mruby prior to 3.2.
TI-2022-00445 CVE-2022-0525 · GHSA-6cpj-3r2r-v2m4
Out-of-bounds Read in mruby/mruby
Priority MEDIUM 42
Out-of-bounds Read in Homebrew mruby prior to 3.2.
TI-2022-01001 CVE-2022-1106 · GHSA-r2j8-v967-j6h6
use after free in mrb_vm_exec in mruby/mruby
Priority MEDIUM 41
use after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3.2.
TI-2022-00630 CVE-2022-0717 · GHSA-9543-hpcg-326v
Out-of-bounds Read in mruby/mruby
Priority MEDIUM 41
Out-of-bounds Read in GitHub repository mruby/mruby prior to 3.2.
TI-2021-21003 CVE-2021-46023 · GHSA-4g9q-c75g-jq7q
An Untrusted Pointer Dereference was discovered in function mrb_vm_exec in mruby before…
Priority MEDIUM 40
An Untrusted Pointer Dereference was discovered in function mrb_vm_exec in mruby before 3.1.0-rc.
TI-2022-00967 CVE-2022-1071 · GHSA-pv86-xgr9-75fj
User after free in mrb_vm_exec in mruby/mruby
Priority LOW 37
User after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3.2.
TI-2018-08788 CVE-2018-12249 · GHSA-3h2j-h4g8-5pmr
An issue was discovered in mruby 1.4.1.
Priority LOW 37
An issue was discovered in mruby 1.4.1.
TI-2021-02988 CVE-2021-4110 · GHSA-xvhr-qprg-rjpw
NULL Pointer Dereference in mruby/mruby
Priority LOW 36
mruby is vulnerable to NULL Pointer Dereference
TI-2020-18652 CVE-2020-36401 · GHSA-qq64-7fh7-7hmw
mruby 2.1.2 has a double free in mrb_default_allocf (called from mrb_free and obj_free).
Priority LOW 36
mruby 2.1.2 has a double free in mrb_default_allocf (called from mrb_free and obj_free).