Vulnerability index

Browse CVEs

36 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Mruby MEDIUM 5.5
CVE-2026-1979

A flaw has been found in mruby up to 3.4.0. This affects the function mrb_vm_exec of the file src/vm.c of the component JMPNOT-to-JMPIF Optimization.…

Fix: after 3.4.0
Fix from $1,600 2026-02-06
Mruby MEDIUM 5.5
CVE-2025-13120

A vulnerability has been found in mruby up to 3.4.0. This vulnerability affects the function sort_cmp of the file src/array.c. Such manipulation lead…

Fix: after 3.4.0
Fix from $1,600 2025-11-13
Mruby HIGH 7.8
CVE-2025-12875

A weakness has been identified in mruby 3.4.0. This vulnerability affects the function ary_fill_exec of the file mrbgems/mruby-array-ext/src/array.c.…

Patch available
Fix from $1,950 2025-11-07
Mruby MEDIUM 5.5
CVE-2025-7207

A vulnerability, which was classified as problematic, was found in mruby up to 3.4.0-rc2. Affected is the function scope_new of the file mrbgems/mrub…

Fix: 3.4.0+
Fix from $1,600 2025-07-09
Mruby HIGH 7.5
CVE-2021-46023

An Untrusted Pointer Dereference was discovered in function mrb_vm_exec in mruby before 3.1.0-rc. The vulnerability causes a segmentation fault and a…

Fix: 3.1.0+
Fix from $1,950 2023-02-14
Mruby HIGH 7.8
CVE-2022-1934

Use After Free in GitHub repository mruby/mruby prior to 3.2.

Fix: 3.2+
Fix from $1,950 2022-05-31
Mruby HIGH 7.8
CVE-2022-1427

Out-of-bounds Read in mrb_obj_is_kind_of in in GitHub repository mruby/mruby prior to 3.2. # Impact: Possible arbitrary code execution if being explo…

Fix: 3.2+
Fix from $1,950 2022-04-23
Mruby CRITICAL 9.8
CVE-2022-1286

heap-buffer-overflow in mrb_vm_exec in mruby/mruby in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploite…

Fix: 3.2+
Fix from $2,300 2022-04-10
Mruby CRITICAL 9.8
CVE-2022-1276

Out-of-bounds Read in mrb_get_args in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited.

Fix: 3.2+
Fix from $2,300 2022-04-10
Mruby CRITICAL 9.8
CVE-2022-1212

Use-After-Free in str_escape in mruby/mruby in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited.

Fix: after 3.0.0
Fix from $2,300 2022-04-05
Mruby MEDIUM 6.5
CVE-2022-1201

NULL Pointer Dereference in mrb_vm_exec with super in GitHub repository mruby/mruby prior to 3.2. This vulnerability is capable of making the mruby i…

Fix: 3.2+
Fix from $1,600 2022-04-02
Mruby CRITICAL 9.1
CVE-2022-1106

use after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3.2.

Fix: after 3.1
Fix from $2,300 2022-03-27
Mruby HIGH 8.2
CVE-2022-1071

User after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3.2.

Fix: after 3.1
Fix from $1,950 2022-03-26
Mruby MEDIUM 5.5
CVE-2022-0890

NULL Pointer Dereference in GitHub repository mruby/mruby prior to 3.2.

Fix: 3.2+
Fix from $1,600 2022-03-10
Mruby CRITICAL 9.1
CVE-2022-0717

Out-of-bounds Read in GitHub repository mruby/mruby prior to 3.2.

Fix: after 3.1
Fix from $2,300 2022-02-23
Mruby MEDIUM 5.5
CVE-2022-0632

NULL Pointer Dereference in Homebrew mruby prior to 3.2.

Fix: 3.2+
Fix from $1,600 2022-02-19
Mruby HIGH 7.1
CVE-2022-0630

Out-of-bounds Read in Homebrew mruby prior to 3.2.

Fix: 3.2+
Fix from $1,950 2022-02-19
Mruby CRITICAL 9.8
CVE-2022-0631

Heap-based Buffer Overflow in Homebrew mruby prior to 3.2.

Fix: 3.2+
Fix from $2,300 2022-02-18
Mruby CRITICAL 9.1
CVE-2022-0623

Out-of-bounds Read in Homebrew mruby prior to 3.2.

Fix: 3.2+
Fix from $2,300 2022-02-17
Mruby MEDIUM 5.5
CVE-2022-0614

Use of Out-of-range Pointer Offset in Homebrew mruby prior to 3.2.

Fix: 3.2+
Fix from $1,600 2022-02-16
Mruby CRITICAL 9.8
CVE-2022-0570

Heap-based Buffer Overflow in Homebrew mruby prior to 3.2.

Fix: after 3.1
Fix from $2,300 2022-02-14
Mruby CRITICAL 9.1
CVE-2022-0525

Out-of-bounds Read in Homebrew mruby prior to 3.2.

Fix: after 3.1
Fix from $2,300 2022-02-09
Mruby HIGH 7.5
CVE-2022-0481

NULL Pointer Dereference in Homebrew mruby prior to 3.2.

Fix: 3.2+
Fix from $1,950 2022-02-04
Mruby MEDIUM 5.5
CVE-2022-0326

NULL Pointer Dereference in Homebrew mruby prior to 3.2.

Fix: 3.2+
Fix from $1,600 2022-01-21
Mruby HIGH 7.5
CVE-2022-0240

mruby is vulnerable to NULL Pointer Dereference

Fix: 3.2+
Fix from $1,950 2022-01-17
Mruby HIGH 7.5
CVE-2021-46020

An untrusted pointer dereference in mrb_vm_exec() of mruby v3.0.0 can lead to a segmentation fault or application crash.

No fix yet
Fix from $1,950 2022-01-14
Mruby CRITICAL 9.8
CVE-2022-0080

mruby is vulnerable to Heap-based Buffer Overflow

Fix: after 3.0.0
Fix from $2,300 2022-01-02
Mruby HIGH 7.5
CVE-2021-4188

mruby is vulnerable to NULL Pointer Dereference

Fix: after 3.0.0
Fix from $1,950 2021-12-30
Mruby HIGH 7.5
CVE-2021-4110

mruby is vulnerable to NULL Pointer Dereference

Fix: 3.1+
Fix from $1,950 2021-12-15
Mruby HIGH 7.8
CVE-2020-36401

mruby 2.1.2 has a double free in mrb_default_allocf (called from mrb_free and obj_free).

Patch available
Fix from $1,950 2021-07-01