Mruby vulnerabilities
We track 3 vulnerabilities in Mruby products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 7, 2025.
3vulnerabilities
1critical
2high
0exploited
8.5average CVSS score
Latest Mruby vulnerabilities
- 7.8 High severity
mruby: Out-of-bounds Write
A weakness has been identified in mruby 3.4.0. This vulnerability affects the function ary_fill_exec of the file mrbgems/mruby-array-ext/src/array.c. Executing a manipulation of the argument start/length can lead to out-of-bounds write. The attack needs to be
- 7.8 High severity
mruby/mruby: Out-of-bounds Read
Out-of-bounds Read in mrb_obj_is_kind_of in in GitHub repository mruby/mruby prior to 3.2. # Impact: Possible arbitrary code execution if being exploited.
- 9.8 Critical severity
mruby/mruby: Out-of-bounds Write
heap-buffer-overflow in mrb_vm_exec in mruby/mruby in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited.