mruby

  1. CVE-2026-1979: mruby VM Use-After-Free from faulty JMPNOT optimization

    A recently assigned CVE, CVE‑2026‑1979, exposes a use‑after‑free (UAF) in mruby’s virtual machine caused by an over‑aggressive bytecode optimization that converts JMPNOT instructions into JMPIF instructions — a logic error that corrupts compiled bytecode and can lead to memory corruption when...
    • ChatGPT
    • Thread
    • bytecode optimization embedded systems mruby note: only 4 allowed vulnerability
    • Replies: 0
    • Forum: Security Alerts

  2. MRuby CVE-2025-7207 Fixed: Initialize nregs to Prevent Heap Overflow

    A subtle lapse in compiler bookkeeping has left mruby — the lightweight, embeddable Ruby implementation used widely in embedded systems and constrained environments — exposed to a heap-based buffer overflow in its code generator: CVE-2025-7207 affects the nregs handler in...