Vulnerabilities

TI-2026-01636 CVE-2026-1979 · GHSA-gxgq-rpmr-r8xr

mruby JMPNOT-to-JMPIF Optimization vm.c mrb_vm_exec use after free

MEDIUM 55

A flaw has been found in mruby up to 3.4.0.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00183 Published 2026-02-06 No fix listed CWE-119

TI-2025-11993 CVE-2025-13120 · GHSA-j383-q79v-268x

mruby array.c sort_cmp use after free

LOW 21

A vulnerability has been found in mruby up to 3.4.0.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00158 Published 2025-11-13 No fix listed CWE-119

TI-2025-11794 CVE-2025-12875 · GHSA-q269-xqww-45mm

mruby array.c ary_fill_exec out-of-bounds write

MEDIUM 55

A weakness has been identified in mruby 3.4.0.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00174 Published 2025-11-07 No fix listed CWE-119

TI-2025-06567 CVE-2025-7207 · GHSA-48pr-6hvf-39v3

mruby nregs codegen.c scope_new heap-based overflow

MEDIUM 55

A vulnerability, which was classified as problematic, was found in mruby up to 3.4.0-rc2.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.0026 Published 2025-07-09 Fix deferred CWE-119

TI-2021-21003 CVE-2021-46023 · GHSA-4g9q-c75g-jq7q

An Untrusted Pointer Dereference was discovered in function mrb_vm_exec in mruby before…

MEDIUM 40

An Untrusted Pointer Dereference was discovered in function mrb_vm_exec in mruby before 3.1.0-rc.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00776 Published 2023-02-14 No fix listed CWE-119

TI-2022-01793 CVE-2022-1934 · GHSA-hp4r-26gw-f2r8

Use After Free in mruby/mruby

LOW 34

Use After Free in GitHub repository mruby/mruby prior to 3.2.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00404 Published 2022-05-31 Fixed in 3.2 CWE-416

TI-2022-01308 CVE-2022-1427 · GHSA-45gc-6g92-9g2j

Out-of-bounds Read in mrb_obj_is_kind_of in in mruby/mruby

LOW 35

Out-of-bounds Read in mrb_obj_is_kind_of in in GitHub repository mruby/mruby prior to 3.2.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00477 Published 2022-04-22 Fixed in 3.2 CWE-125

TI-2022-01170 CVE-2022-1286 · GHSA-6c7w-5xfj-j2mc

heap-buffer-overflow in mrb_vm_exec in mruby/mruby in mruby/mruby

MEDIUM 44

heap-buffer-overflow in mrb_vm_exec in mruby/mruby in GitHub repository mruby/mruby prior to 3.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01184 Published 2022-04-10 Fixed in 3.2 CWE-122

TI-2022-01160 CVE-2022-1276 · GHSA-66hc-pc5r-hwjr

Out-of-bounds Read in mrb_get_args in mruby/mruby

MEDIUM 45

Out-of-bounds Read in mrb_get_args in GitHub repository mruby/mruby prior to 3.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01576 Published 2022-04-10 Fixed in 3.2 CWE-125

TI-2022-01100 CVE-2022-1212 · GHSA-xh66-6mj6-94rg

Use-After-Free in str_escape in mruby/mruby in mruby/mruby

MEDIUM 46

Use-After-Free in str_escape in mruby/mruby in GitHub repository mruby/mruby prior to 3.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01794 Published 2022-04-05 Fixed in 3.2 CWE-416

TI-2022-01089 CVE-2022-1201 · GHSA-p2wj-9vfc-2xj7

NULL Pointer Dereference in mrb_vm_exec with super in mruby/mruby

LOW 29

NULL Pointer Dereference in mrb_vm_exec with super in GitHub repository mruby/mruby prior to 3.2.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00369 Published 2022-04-02 Fixed in 3.2 CWE-476

TI-2022-01001 CVE-2022-1106 · GHSA-r2j8-v967-j6h6

use after free in mrb_vm_exec in mruby/mruby

MEDIUM 41

use after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3.2.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00971 Published 2022-03-27 Fixed in 3.2 CWE-416

TI-2022-00967 CVE-2022-1071 · GHSA-pv86-xgr9-75fj

User after free in mrb_vm_exec in mruby/mruby

LOW 37

User after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3.2.

CVSS 3.1HIGH 8.2 Local Low privileges User interaction EPSS 0.0092 Published 2022-03-26 Fixed in 3.2 CWE-416

TI-2022-00794 CVE-2022-0890 · GHSA-j279-7379-x7mj

NULL Pointer Dereference in mruby/mruby

LOW 26

NULL Pointer Dereference in GitHub repository mruby/mruby prior to 3.2.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00827 Published 2022-03-10 Fixed in 3.2 CWE-476

TI-2022-00630 CVE-2022-0717 · GHSA-9543-hpcg-326v

Out-of-bounds Read in mruby/mruby

MEDIUM 41

Out-of-bounds Read in GitHub repository mruby/mruby prior to 3.2.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00895 Published 2022-02-23 Fixed in 3.2 CWE-125

TI-2022-00549 CVE-2022-0632 · GHSA-3xxj-pcr2-rvh7

NULL Pointer Dereference in mruby/mruby

LOW 26

NULL Pointer Dereference in Homebrew mruby prior to 3.2.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0081 Published 2022-02-19 Fixed in 3.2 CWE-476

TI-2022-00547 CVE-2022-0630 · GHSA-f46c-4g24-cvr4

Out-of-bounds Read in mruby/mruby

LOW 33

Out-of-bounds Read in Homebrew mruby prior to 3.2.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00987 Published 2022-02-19 Fixed in 3.2 CWE-125

TI-2022-00548 CVE-2022-0631 · GHSA-hv83-f8w5-chhv

Heap-based Buffer Overflow in mruby/mruby

MEDIUM 44

Heap-based Buffer Overflow in Homebrew mruby prior to 3.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00922 Published 2022-02-18 Fixed in 3.2 CWE-122

TI-2022-00540 CVE-2022-0623 · GHSA-ff35-7f56-3w6p

Out-of-bounds Read in mruby/mruby

MEDIUM 43

Out-of-bounds Read in Homebrew mruby prior to 3.2.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01637 Published 2022-02-17 Fixed in 3.2 CWE-125

TI-2022-00531 CVE-2022-0614 · GHSA-rr79-wxqv-v9vq

Use of Out-of-range Pointer Offset in mruby/mruby

LOW 27

Use of Out-of-range Pointer Offset in Homebrew mruby prior to 3.2.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00914 Published 2022-02-16 Fixed in 3.2 CWE-823

TI-2022-00488 CVE-2022-0570 · GHSA-69j8-4j47-xjj7

Heap-based Buffer Overflow in mruby/mruby

MEDIUM 44

Heap-based Buffer Overflow in Homebrew mruby prior to 3.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01209 Published 2022-02-13 Fixed in 3.2 CWE-122

TI-2022-00445 CVE-2022-0525 · GHSA-6cpj-3r2r-v2m4

Out-of-bounds Read in mruby/mruby

MEDIUM 42

Out-of-bounds Read in Homebrew mruby prior to 3.2.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01162 Published 2022-02-09 Fixed in 3.2 CWE-125

TI-2022-00404 CVE-2022-0481 · GHSA-h8gw-f6pq-8cg5

NULL Pointer Dereference in mruby/mruby

LOW 35

NULL Pointer Dereference in Homebrew mruby prior to 3.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00918 Published 2022-02-04 Fixed in 3.2 CWE-476

TI-2022-00254 CVE-2022-0326 · GHSA-54p3-947h-6fpr

NULL Pointer Dereference in mruby/mruby

LOW 26

NULL Pointer Dereference in Homebrew mruby prior to 3.2.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0081 Published 2022-01-21 Fixed in 3.2 CWE-476

TI-2022-00176 CVE-2022-0240 · GHSA-r744-r36f-363j

NULL Pointer Dereference in mruby/mruby

LOW 35

mruby is vulnerable to NULL Pointer Dereference

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00963 Published 2022-01-17 Fixed in 3.2 CWE-476

Vulnerabilities

Filters