CVE-2022-1071 - User after free in mrb_vm_exec in mruby/mruby

Back Back to CVE browser

HIGH

User after free in mrb_vm_exec in mruby/mruby

Published Mar 26, 2022

8.2

HIGH

CVSS 3.1

EPSS 0.92%

Description

User after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3.2.

Affected products

Vendor Mruby Product Mruby/mruby Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <3.2

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Mruby

Mruby/mruby

n/a

Version	Status	Constraints
unspecified	affected	<3.2

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-416

Use After Free

References (2)

https://github.com/mruby/mruby/commit/aaa28a508903041dd7399d4159a8ace9766b022f
x_refsource_MISCPatchThird Party Advisory
https://huntr.dev/bounties/6597ece9-07af-415b-809b-919ce0a17cf3
x_refsource_CONFIRMExploitPatchThird Party Advisory

Link	Providers	Tags
https://github.com/mruby/mruby/commit/aaa28a508903041dd7399d4159a8ace9766b022f		x_refsource_MISCPatchThird Party Advisory
https://huntr.dev/bounties/6597ece9-07af-415b-809b-919ce0a17cf3		x_refsource_CONFIRMExploitPatchThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner @huntrdev

Published Mar 26, 2022

Updated Aug 2, 2024

Reserved Mar 25, 2022

Link CVE-2022-1071

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-1071

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-1071