Paper/Archive/CVE-2022-0570

CVE-2022-0570

mruby mruby/mruby — Heap-based Buffer Overflow in mruby/mruby

EPSS 1%CVSS 9.8

critical.is priorityof 100

43

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 68.4.684 × 2013.7 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

Heap-based Buffer Overflow in Homebrew mruby prior to 3.2.

Affected

ProductAffectedFixed inSource

mruby/mrubyunspecified – < 3.23.2CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

@huntrdev (CNA)8.4CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refhuntr.dev/bounties/65a7632e-f95b-4836-b1a7-9cb95e5124f1 refgithub.com/mruby/mruby/commit/38b164ace7d6ae1c367883a3d67d7f559783faad