Description
A weakness has been identified in mruby 3.4.0. This vulnerability affects the function ary_fill_exec of the file mrbgems/mruby-array-ext/src/array.c. Executing a manipulation of the argument start/length can lead to out-of-bounds write. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. This patch is called 93619f06dd378db6766666b30c08978311c7ec94. It is best practice to apply a patch to resolve this issue.
Affected products
mruby: mruby
References10
- github.com/makesoftwaresafe/mruby/commit/93619f06dd378db6766666… Patch
- github.com/mruby/mruby/issues/6650#issuecomment-3430851605 Patch
- github.com/mruby/mruby/issues/6650#issuecomment-3430851605 Patch
- github.com/mruby/mruby/
- github.com/mruby/mruby/issues/6650 Issue Tracking
- github.com/mruby/mruby/issues/6650#event-20443453808 Issue Tracking
- vuldb.com/?ctiid.331511 Permissions RequiredVDB Entry
- vuldb.com/?id.331511 Third Party AdvisoryVDB Entry
- vuldb.com/?submit.680879 Third Party AdvisoryVDB Entry
- github.com/mruby/mruby/issues/6650 Issue Tracking
Metrics
- CVSS 3.1
-
7.8
HIGH
Score source: NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 4.0
-
1.9
LOW
Score source: CNA
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - EPSS — exploit probability
- 0% percentile: 7 · as of 10 November 2026
- CWE
- CWE-119CWE-787
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.