CVE-2022-1106

CRITICAL

Mruby < 3.1 - Use After Free

Title source: rule

use after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3.2.

Core 2

Core References

Exploit, Patch, Third Party Advisory x_refsource_confirm

Patch, Third Party Advisory x_refsource_misc

CVSS v3 9.1

EPSS 0.0014

EPSS Percentile 34.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

CWE

CWE-416

Status published

Products (1)

mruby/mruby < 3.1

Published Mar 27, 2022

Tracked Since Feb 18, 2026