Skip to content
4.8 Medium

CVE-2025-13397 A security vulnerability has been detected in mrubyc up to 3.4

Description

A security vulnerability has been detected in mrubyc up to 3.4. This impacts the function mrbc_raw_realloc of the file src/alloc.c. Such manipulation of the argument ptr leads to null pointer dereference. An attack has to be approached locally. The name of the patch is 009111904807b8567262036bf45297c3da8f1c87. It is advisable to implement a patch to correct this issue.

Affected products and versions

Product Affected versions Fixed in
mrubyc 3.4 No fix stated
mrubyc 3.3 No fix stated
mrubyc 3.2 No fix stated
mrubyc 3.1 No fix stated
mrubyc 3.0 No fix stated
Track this CVE