CVE-2018-12248

An issue was discovered in mruby 1.4.1. There is a heap-based buffer over-read associated with OP_ENTER because mrbgems/mruby-fiber/src/fiber.c does not extend the stack in cases of many arguments to fiber.
References
Link Resource
https://github.com/mruby/mruby/commit/778500563a9f7ceba996937dc886bd8cde29b42b Patch Third Party Advisory
https://github.com/mruby/mruby/issues/4038 Issue Tracking Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:mruby:mruby:1.4.1:*:*:*:*:*:*:*

History

No history.

Information

Published : 2018-06-12 14:29

Updated : 2024-02-04 19:46


NVD link : CVE-2018-12248

Mitre link : CVE-2018-12248

CVE.ORG link : CVE-2018-12248


JSON object : View

Products Affected

mruby

  • mruby
CWE
CWE-125

Out-of-bounds Read