CVE-2017-9527

High

Published: 11/06/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The mark_context_stack function in gc.c in mruby through 1.2.0 allows attackers to cause a denial of service (heap-based use-after-free and application crash) or possibly have unspecified other impact via a crafted .rb file.

Risk Assessment

Organizations may experience application downtime and potential data loss due to attacks exploiting this vulnerability.

Recommendation

It is recommended to update mruby to the latest version to mitigate the risks associated with this vulnerability.

Other vulnerabilities in mruby

CVE-2022-4996Medium
A flaw has been found in mruby 3.1.0. The function udiv in bigint.c is affected. Executing a manipulation can lead to floating point comparison with incorrect operator. The attack can be launched remotely, and the exploit has been published.

Original NVD description (English source)