Mruby vulnerabilities

Products

• Mruby 42
• Mruby/mruby 23

Newest

• mruby mruby JMPNOT-to-JMPIF Optimization vm.c mrb_vm_exec use after free CVE-2026-1979 Fix available 4.8 MediumFebruary 6, 2026
• mruby mruby array.c sort_cmp use after free CVE-2025-13120 Fix available 4.8 MediumNovember 13, 2025
• mruby mruby array.c ary_fill_exec out-of-bounds write CVE-2025-12875 4.8 MediumNovember 7, 2025
• mruby mruby nregs codegen.c scope_new heap-based overflow CVE-2025-7207 Fix available 4.8 MediumJuly 9, 2025
• mruby An Untrusted Pointer Dereference was discovered in function mrb_vm_exec in mruby before 3.1.0-rc.... CVE-2021-46023 Fix available 7.5 HighFebruary 14, 2023
• mruby, mruby mruby/mruby +1 more Use After Free in mruby/mruby CVE-2022-1934 5.1 MediumMay 31, 2022
• mruby, mruby mruby/mruby +1 more Out-of-bounds Read in mrb_obj_is_kind_of in in mruby/mruby CVE-2022-1427 Fix available 7.7 HighApril 22, 2022
• mruby, mruby mruby/mruby +1 more heap-buffer-overflow in mrb_vm_exec in mruby/mruby in mruby/mruby CVE-2022-1286 Fix available 5.9 MediumApril 10, 2022
• mruby, mruby mruby/mruby +1 more Out-of-bounds Read in mrb_get_args in mruby/mruby CVE-2022-1276 Fix available 8.4 HighApril 10, 2022
• mruby, mruby mruby/mruby +1 more Use-After-Free in str_escape in mruby/mruby in mruby/mruby CVE-2022-1212 Fix available 9.3 CriticalApril 5, 2022
• mruby, mruby mruby/mruby +1 more NULL Pointer Dereference in mrb_vm_exec with super in mruby/mruby CVE-2022-1201 Fix available 7.1 HighApril 2, 2022
• mruby, mruby mruby/mruby +1 more use after free in mrb_vm_exec in mruby/mruby CVE-2022-1106 Fix available 7.2 HighMarch 27, 2022
• mruby, mruby mruby/mruby +1 more User after free in mrb_vm_exec in mruby/mruby CVE-2022-1071 Fix available 7.7 HighMarch 26, 2022
• mruby, mruby mruby/mruby +1 more NULL Pointer Dereference in mruby/mruby CVE-2022-0890 Fix available 5.5 MediumMarch 10, 2022
• mruby, mruby mruby/mruby +1 more Out-of-bounds Read in mruby/mruby CVE-2022-0717 Fix available 6.8 MediumFebruary 23, 2022
• mruby, mruby mruby/mruby +1 more NULL Pointer Dereference in mruby/mruby CVE-2022-0632 Fix available 5.5 MediumFebruary 19, 2022
• mruby, mruby mruby/mruby +1 more Out-of-bounds Read in mruby/mruby CVE-2022-0630 7.1 HighFebruary 19, 2022
• mruby, mruby mruby/mruby +1 more Heap-based Buffer Overflow in mruby/mruby CVE-2022-0631 Fix available 5.9 MediumFebruary 18, 2022
• mruby, mruby mruby/mruby +1 more Out-of-bounds Read in mruby/mruby CVE-2022-0623 Fix available 6.5 MediumFebruary 17, 2022
• mruby, mruby mruby/mruby +1 more Use of Out-of-range Pointer Offset in mruby/mruby CVE-2022-0614 Fix available 8.4 HighFebruary 16, 2022
• mruby, mruby mruby/mruby +1 more Heap-based Buffer Overflow in mruby/mruby CVE-2022-0570 8.4 HighFebruary 13, 2022
• mruby, mruby mruby/mruby +1 more Out-of-bounds Read in mruby/mruby CVE-2022-0525 8.4 HighFebruary 9, 2022
• mruby, mruby mruby/mruby +1 more NULL Pointer Dereference in mruby/mruby CVE-2022-0481 Fix available 5.5 MediumFebruary 4, 2022
• mruby, mruby mruby/mruby +1 more NULL Pointer Dereference in mruby/mruby CVE-2022-0326 Fix available 5.5 MediumJanuary 21, 2022
• mruby, mruby mruby/mruby +1 more NULL Pointer Dereference in mruby/mruby CVE-2022-0240 Fix available 6.2 MediumJanuary 17, 2022
• mruby An untrusted pointer dereference in mrb_vm_exec() of mruby v3.0.0 can lead to a segmentation... CVE-2021-46020 Fix available 7.5 HighJanuary 14, 2022
• mruby, mruby mruby/mruby +1 more Heap-based Buffer Overflow in mruby/mruby CVE-2022-0080 Fix available 8.2 HighJanuary 2, 2022
• mruby, mruby mruby/mruby +1 more NULL Pointer Dereference in mruby/mruby CVE-2021-4188 Fix available 6.8 MediumDecember 30, 2021
• mruby, mruby mruby/mruby +1 more NULL Pointer Dereference in mruby/mruby CVE-2021-4110 Fix available 9.1 CriticalDecember 15, 2021
• mruby mruby 2.1.2 has a double free in mrb_default_allocf (called from mrb_free and obj_free). CVE-2020-36401 Fix available 7.8 HighJuly 1, 2021
• mruby, debian linux +1 more mruby through 2.1.2-rc has a heap-based buffer overflow in the mrb_yield_with_class function in... CVE-2020-15866 Fix available 9.8 CriticalJuly 21, 2020
• mruby In mruby 2.1.0, there is a use-after-free in hash_values_at in mrbgems/mruby-hash-ext/src/hash... CVE-2020-6838 9.8 CriticalJanuary 11, 2020
• mruby In mruby 2.1.0, there is a stack-based buffer overflow in mrb_str_len_to_dbl in string.c. CVE-2020-6839 9.8 CriticalJanuary 11, 2020
• mruby In mruby 2.1.0, there is a use-after-free in hash_slice in mrbgems/mruby-hash-ext/src/hash-ext.c. CVE-2020-6840 9.8 CriticalJanuary 11, 2020
• mruby, debian linux +1 more The CHECK macro in mrbgems/mruby-sprintf/src/sprintf.c in mruby 1.4.1 contains a signed integer... CVE-2018-14337 Fix available 7.5 HighJuly 17, 2018
• mruby, debian linux +1 more An issue was discovered in mruby 1.4.1. There is a NULL pointer dereference in mrb_class_real... CVE-2018-12249 Fix available 7.5 HighJune 12, 2018
• mruby An issue was discovered in mruby 1.4.1. There is a heap-based buffer over-read associated with... CVE-2018-12248 Fix available 7.5 HighJune 12, 2018
• mruby An issue was discovered in mruby 1.4.1. There is a NULL pointer dereference in mrb_class, related... CVE-2018-12247 7.5 HighJune 12, 2018
• mruby, debian linux +1 more The init_copy function in kernel.c in mruby 1.4.1 makes initialize_copy calls for TT_ICLASS... CVE-2018-11743 Fix available 9.8 CriticalJune 5, 2018
• mruby In versions of mruby up to and including 1.4.0, a use-after-free vulnerability exists in src/io.c... CVE-2018-10199 Fix available 9.8 CriticalApril 18, 2018
• mruby, debian linux +1 more In versions of mruby up to and including 1.4.0, an integer overflow exists in src/vm.c:... CVE-2018-10191 Fix available 9.8 CriticalApril 17, 2018
• mruby, debian linux +1 more The mark_context_stack function in gc.c in mruby through 1.2.0 allows attackers to cause a denial... CVE-2017-9527 Fix available 7.8 HighJune 11, 2017