CVE-2022-0080 - Heap-based Buffer Overflow in mruby/mruby

CRITICAL

Heap-based Buffer Overflow in mruby/mruby

Published Jan 2, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 1.41%

mruby is vulnerable to Heap-based Buffer Overflow

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
unspecified	affected	<3.1

No remediation recorded yet.

Weaknesses (1)

CWE-122

Link	Providers	Tags
https://github.com/mruby/mruby/commit/28ccc664e5dcd3f9d55173e9afde77c4705a9ab6		x_refsource_MISCPatchThird Party Advisory
https://huntr.dev/bounties/59a70392-4864-4ce3-8e35-6ac2111d1e2e		x_refsource_CONFIRMExploitIssue TrackingPatchThird Party Advisory