Double Free Vulnerability in mruby 2.1.2 by mruby
CVE-2020-36401

7.8HIGH

Key Information:

Vendor: Mruby
Status: Mruby
Vendor: CVE Published:; 1 July 2021

What is CVE-2020-36401?

The mruby 2.1.2 version contains a vulnerability where a double free error occurs in the mrb_default_allocf function, which is invoked by mrb_free and obj_free. This issue can lead to potential memory corruption, enabling attackers to exploit the system behavior and potentially execute arbitrary code. Proper allocation and deallocation practices should be enforced to mitigate this risk and ensure stable software performance.