OSV-2023-366
Heap-use-after-free in gc_mark_children
No scoreFix available
OSV-2023-366 is a vulnerability with no CVSS score yet in mruby, published May 4, 2023. No source lists public exploit code. A source reports a fix.
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58577
Crash type: Heap-use-after-free READ 4
Crash state:
gc_mark_children
incremental_gc
mrb_full_gc
What each source reports
OSV No score
Heap-use-after-free in gc_mark_children
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58577
Crash type: Heap-use-after-free READ 4
Crash state:
gc_mark_children
incremental_gc
mrb_full_gc
- Record
OSV-2023-366- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mrubyOSS-Fuzz |
Listed versions, plus commit ranges 3.2.03.2.0-rc3.2.0-rc23.2.0-rc33.2.0-rc4 |
None known |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-02 | created | OSV |