Mruby - vulnerabilities (CVEs)

43 CVEs in 2 products, 0 in the last 30 days, newest from 2026-08-19.

Products

• Mruby - 43 CVEs
• Mrubymruby - 23 CVEs

Newest CVEs of Mruby

• CVE-2022-4996 - CVSS 6.9 (medium), 2026-08-19: A flaw has been found in mruby 3.1.0. Affected is the function udiv of the file bigint.c. Executing a manipulation can lead to floating point comparison with…
• CVE-2026-1979 - CVSS 5.5 (medium), 2026-02-06: A flaw has been found in mruby up to 3.4.0. This affects the function mrb_vm_exec of the file src/vm.c of the component JMPNOT-to-JMPIF Optimization.…
• CVE-2025-13120 - CVSS 5.5 (medium), 2025-11-13: A vulnerability has been found in mruby up to 3.4.0. This vulnerability affects the function sort_cmp of the file src/array.c. Such manipulation leads to use…
• CVE-2025-12875 - CVSS 7.8 (high), 2025-11-07: A weakness has been identified in mruby 3.4.0. This vulnerability affects the function ary_fill_exec of the file mrbgems/mruby-array-ext/src/array.c.…
• CVE-2025-7207 - CVSS 5.5 (medium), 2025-07-09: A vulnerability, which was classified as problematic, was found in mruby up to 3.4.0-rc2. Affected is the function scope_new of the file…
• CVE-2021-46023 - CVSS 7.5 (high), 2023-02-14: An Untrusted Pointer Dereference was discovered in function mrb_vm_exec in mruby before 3.1.0-rc. The vulnerability causes a segmentation fault and…
• CVE-2022-1934 - CVSS 7.8 (high), 2022-05-31: Use After Free in GitHub repository mruby/mruby prior to 3.2.
• CVE-2022-1427 - CVSS 7.8 (high), 2022-04-23: Out-of-bounds Read in mrb_obj_is_kind_of in in GitHub repository mruby/mruby prior to 3.2. # Impact: Possible arbitrary code execution if being exploited.
• CVE-2022-1286 - CVSS 9.8 (critical), 2022-04-10: heap-buffer-overflow in mrb_vm_exec in mruby/mruby in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited.
• CVE-2022-1276 - CVSS 9.8 (critical), 2022-04-10: Out-of-bounds Read in mrb_get_args in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited.
• CVE-2022-1212 - CVSS 9.8 (critical), 2022-04-05: Use-After-Free in str_escape in mruby/mruby in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited.
• CVE-2022-1201 - CVSS 7.1 (high), 2022-04-02: NULL Pointer Dereference in mrb_vm_exec with super in GitHub repository mruby/mruby prior to 3.2. This vulnerability is capable of making the mruby…
• CVE-2022-1106 - CVSS 9.1 (critical), 2022-03-27: use after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3.2.
• CVE-2022-1071 - CVSS 8.2 (high), 2022-03-26: User after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3.2.
• CVE-2022-0890 - CVSS 5.5 (medium), 2022-03-10: NULL Pointer Dereference in GitHub repository mruby/mruby prior to 3.2.
• CVE-2022-0717 - CVSS 9.1 (critical), 2022-02-23: Out-of-bounds Read in GitHub repository mruby/mruby prior to 3.2.
• CVE-2022-0632 - CVSS 5.5 (medium), 2022-02-19: NULL Pointer Dereference in Homebrew mruby prior to 3.2.
• CVE-2022-0630 - CVSS 7.1 (high), 2022-02-19: Out-of-bounds Read in Homebrew mruby prior to 3.2.
• CVE-2022-0631 - CVSS 9.8 (critical), 2022-02-18: Heap-based Buffer Overflow in Homebrew mruby prior to 3.2.
• CVE-2022-0623 - CVSS 9.1 (critical), 2022-02-17: Out-of-bounds Read in Homebrew mruby prior to 3.2.
• CVE-2022-0614 - CVSS 8.4 (high), 2022-02-16: Use of Out-of-range Pointer Offset in Homebrew mruby prior to 3.2.
• CVE-2022-0570 - CVSS 9.8 (critical), 2022-02-14: Heap-based Buffer Overflow in Homebrew mruby prior to 3.2.
• CVE-2022-0525 - CVSS 9.1 (critical), 2022-02-09: Out-of-bounds Read in Homebrew mruby prior to 3.2.
• CVE-2022-0481 - CVSS 7.5 (high), 2022-02-04: NULL Pointer Dereference in Homebrew mruby prior to 3.2.
• CVE-2022-0326 - CVSS 5.5 (medium), 2022-01-21: NULL Pointer Dereference in Homebrew mruby prior to 3.2.
• CVE-2022-0240 - CVSS 7.5 (high), 2022-01-17: mruby is vulnerable to NULL Pointer Dereference
• CVE-2021-46020 - CVSS 7.5 (high), 2022-01-14: An untrusted pointer dereference in mrb_vm_exec() of mruby v3.0.0 can lead to a segmentation fault or application crash.
• CVE-2022-0080 - CVSS 9.8 (critical), 2022-01-02: mruby is vulnerable to Heap-based Buffer Overflow
• CVE-2021-4188 - CVSS 7.5 (high), 2021-12-30: mruby is vulnerable to NULL Pointer Dereference
• CVE-2021-4110 - CVSS 9.1 (critical), 2021-12-15: mruby is vulnerable to NULL Pointer Dereference