Untrusted Pointer Dereference in mruby Application
CVE-2021-46020

7.5HIGH

Key Information:

Vendor: Mruby
Status: Mruby
Vendor: CVE Published:; 14 January 2022

What is CVE-2021-46020?

An untrusted pointer dereference vulnerability in the mrb_vm_exec() function of mruby version 3.0.0 can result in a segmentation fault or crash of the application. This issue poses potential risks for applications relying on mruby, highlighting the need for vigilance in secure coding practices to prevent exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/mruby/mruby/issues/5613

x_refsource_MISC

CVSS V3.1

Score:

7.5

Severity:

HIGH

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jan 14, 2022
Vulnerability Reserved
Jan 3, 2022

JSON

Mruby

What is CVE-2021-46020?

Human OS v1.0: Ageing Is an Unpatched Zero-Day Vulnerability.

References

CVSS V3.1

Timeline

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.