Browse CVEs

MEDIUM 5.5 CVE-2026-1979 A flaw has been found in mruby up to 3.4.0. This affects the function mrb_vm_exec of the file src/vm.c of the component JMPNOT-to-JMPIF Optimization.… Mruby after 3.4.0 Fix from $1,6002026-02-06 MEDIUM 5.5 CVE-2025-13120 A vulnerability has been found in mruby up to 3.4.0. This vulnerability affects the function sort_cmp of the file src/array.c. Such manipulation lead… Mruby after 3.4.0 Fix from $1,6002025-11-13 HIGH 7.8 CVE-2025-12875 A weakness has been identified in mruby 3.4.0. This vulnerability affects the function ary_fill_exec of the file mrbgems/mruby-array-ext/src/array.c.… Mruby Patch available Fix from $1,9502025-11-07 MEDIUM 5.5 CVE-2025-7207 A vulnerability, which was classified as problematic, was found in mruby up to 3.4.0-rc2. Affected is the function scope_new of the file mrbgems/mrub… Mruby 3.4.0+ Fix from $1,6002025-07-09 HIGH 7.5 CVE-2021-46023 An Untrusted Pointer Dereference was discovered in function mrb_vm_exec in mruby before 3.1.0-rc. The vulnerability causes a segmentation fault and a… Mruby 3.1.0+ Fix from $1,9502023-02-14 HIGH 7.8 CVE-2022-1934 Use After Free in GitHub repository mruby/mruby prior to 3.2. Mruby 3.2+ Fix from $1,9502022-05-31 HIGH 7.8 CVE-2022-1427 Out-of-bounds Read in mrb_obj_is_kind_of in in GitHub repository mruby/mruby prior to 3.2. # Impact: Possible arbitrary code execution if being explo… Mruby 3.2+ Fix from $1,9502022-04-23 CRITICAL 9.8 CVE-2022-1286 heap-buffer-overflow in mrb_vm_exec in mruby/mruby in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploite… Mruby 3.2+ Fix from $2,3002022-04-10 CRITICAL 9.8 CVE-2022-1276 Out-of-bounds Read in mrb_get_args in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited. Mruby 3.2+ Fix from $2,3002022-04-10 CRITICAL 9.8 CVE-2022-1212 Use-After-Free in str_escape in mruby/mruby in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited. Mruby after 3.0.0 Fix from $2,3002022-04-05 MEDIUM 6.5 CVE-2022-1201 NULL Pointer Dereference in mrb_vm_exec with super in GitHub repository mruby/mruby prior to 3.2. This vulnerability is capable of making the mruby i… Mruby 3.2+ Fix from $1,6002022-04-02 CRITICAL 9.1 CVE-2022-1106 use after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3.2. Mruby after 3.1 Fix from $2,3002022-03-27 HIGH 8.2 CVE-2022-1071 User after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3.2. Mruby after 3.1 Fix from $1,9502022-03-26 MEDIUM 5.5 CVE-2022-0890 NULL Pointer Dereference in GitHub repository mruby/mruby prior to 3.2. Mruby 3.2+ Fix from $1,6002022-03-10 CRITICAL 9.1 CVE-2022-0717 Out-of-bounds Read in GitHub repository mruby/mruby prior to 3.2. Mruby after 3.1 Fix from $2,3002022-02-23 MEDIUM 5.5 CVE-2022-0632 NULL Pointer Dereference in Homebrew mruby prior to 3.2. Mruby 3.2+ Fix from $1,6002022-02-19 HIGH 7.1 CVE-2022-0630 Out-of-bounds Read in Homebrew mruby prior to 3.2. Mruby 3.2+ Fix from $1,9502022-02-19 CRITICAL 9.8 CVE-2022-0631 Heap-based Buffer Overflow in Homebrew mruby prior to 3.2. Mruby 3.2+ Fix from $2,3002022-02-18 CRITICAL 9.1 CVE-2022-0623 Out-of-bounds Read in Homebrew mruby prior to 3.2. Mruby 3.2+ Fix from $2,3002022-02-17 MEDIUM 5.5 CVE-2022-0614 Use of Out-of-range Pointer Offset in Homebrew mruby prior to 3.2. Mruby 3.2+ Fix from $1,6002022-02-16 CRITICAL 9.8 CVE-2022-0570 Heap-based Buffer Overflow in Homebrew mruby prior to 3.2. Mruby after 3.1 Fix from $2,3002022-02-14 CRITICAL 9.1 CVE-2022-0525 Out-of-bounds Read in Homebrew mruby prior to 3.2. Mruby after 3.1 Fix from $2,3002022-02-09 HIGH 7.5 CVE-2022-0481 NULL Pointer Dereference in Homebrew mruby prior to 3.2. Mruby 3.2+ Fix from $1,9502022-02-04 MEDIUM 5.5 CVE-2022-0326 NULL Pointer Dereference in Homebrew mruby prior to 3.2. Mruby 3.2+ Fix from $1,6002022-01-21 HIGH 7.5 CVE-2022-0240 mruby is vulnerable to NULL Pointer Dereference Mruby 3.2+ Fix from $1,9502022-01-17 HIGH 7.5 CVE-2021-46020 An untrusted pointer dereference in mrb_vm_exec() of mruby v3.0.0 can lead to a segmentation fault or application crash. Mruby No fix yet Fix from $1,9502022-01-14 CRITICAL 9.8 CVE-2022-0080 mruby is vulnerable to Heap-based Buffer Overflow Mruby after 3.0.0 Fix from $2,3002022-01-02 HIGH 7.5 CVE-2021-4188 mruby is vulnerable to NULL Pointer Dereference Mruby after 3.0.0 Fix from $1,9502021-12-30 HIGH 7.5 CVE-2021-4110 mruby is vulnerable to NULL Pointer Dereference Mruby 3.1+ Fix from $1,9502021-12-15 HIGH 7.8 CVE-2020-36401 mruby 2.1.2 has a double free in mrb_default_allocf (called from mrb_free and obj_free). Mruby Patch available Fix from $1,9502021-07-01