OSV-2021-1045

    Dashboard / Vulnerabilities / OSV-2021-1045

    OSV-2021-1045

    Published: 24 Jul 2021Last Modified: 13 Apr 2022

    Summary: Heap-buffer-overflow in mrb_vm_exec

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36464 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: mrb_vm_exec mrb_vm_run mrb_top_run ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36464

    Affected packages

    Package

    Name: mruby

    Purl: pkg:generic/mruby

    Affected ranges

    Type: GIT

    Events:

    Introduced- 47fca90069be44594d75eca69f1d978f5d9b4d65
    Fixed -9c43276eb51d81ed6f62ec1810c944580caebc40

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2021-1045 | CVE-DB