Veille CVE

Recherche « mrubyc »

3 CVE

  1. CVE-2026-86547 6.2 Moyenne

    mrubyc

    mrubyc through 4.0.0 contains a null pointer dereference vulnerability in the op_enter() handler in src/vm.c when processing untrusted bytecode. Attackers can craft malicious .mrb bytecode files with OP_ENTER instructions at the top level to crash the embedding application and cause denial of service.

  2. CVE-2026-38976 7.5 Élevée

    mrubyc through 3.4.1 was found to contain a NULL pointer dereference in src/vm.c in op_super() / OP_SUPER due to a missing runtime guard for top-level super.

  3. CVE-2026-38973 4.4 Moyenne

    mrubyc through release3.4.1 was found to contain an out-of-bounds read in builtin missing-method lookup inside mrbc_find_method().