CVE-2022-1106: use after free in mrb_vm_exec in mruby/mruby
Published Mar 27, 2022
·Updated
use after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2.
Affected Software
1 affected component
mruby mruby<=3.1
Remediation
Event History
Mar 27, 2022
CVE Published
via MITRE·02:05 PM
Data Sourced
via MITRE·02:05 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2022-1106?
CVE-2022-1106 is a vulnerability in the GitHub repository mruby/mruby prior to version 3.2 that allows for use after free in mrb_vm_exec.
2
Is this vulnerability severe?
Yes, this vulnerability is classified as critical with a severity score of 9.1.
3
Which software versions are affected by CVE-2022-1106?
Versions up to and including 3.1 of Mruby are affected by CVE-2022-1106.
4
How can I fix CVE-2022-1106?
To fix CVE-2022-1106, it is recommended to update Mruby to version 3.2 or higher.
5
Where can I find more information about CVE-2022-1106?
More information about CVE-2022-1106 can be found at the following references: [GitHub commit](https://github.com/mruby/mruby/commit/7f5a490d09f4d56801ac3a3e4e39e03e1471b44c) and [Huntr bounty](https://huntr.dev/bounties/16b9d0ea-71ed-41bc-8a88-2deb4c20be8f).