CVE-2026-38973

MediumCVSS 4.4

Published: 06/07/2026(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

5th percentile - higher than 5% of all known CVEs

An out-of-bounds read was found in mrubyc up to release 3.4.1 during builtin missing-method lookup in mrbc_find_method().

This vulnerability may lead to disclosure of sensitive memory data or unexpected application behavior in systems using mrubyc.

Update mrubyc to a version newer than 3.4.1 as soon as a patch is released by the vendor.

Original NVD description (English source)

mrubyc through release3.4.1 was found to contain an out-of-bounds read in builtin missing-method lookup inside mrbc_find_method().