CVE-2022-4996: mruby bigint.c udiv floating point comparison with incorrect operator
Published Aug 19, 2026
·Updated
A flaw has been found in mruby 3.1.0. Affected is the function udiv of the file bigint.c. Executing a manipulation can lead to floating point comparison with incorrect operator. It is possible to launch the attack remotely. The exploit has been published and may be used. It is best practice to apply a patch to resolve this issue.
Affected Software
1 affected component
mruby mruby=3.1.0
Event History
Aug 19, 2026
CVE Published
via MITRE·11:45 PM
Data Sourced
via MITRE·11:45 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What must an attacker be able to do to exploit this issue?
The issue can be exploited remotely and requires no privileges or user interaction according to the supplied severity vector. The vulnerability is in the udiv function in bigint.c.
2
Is public exploit code available?
Yes. The supplied data states that an exploit has been published and may be used.
3
What is the recommended remediation?
Apply a patch to resolve the issue. The provided data identifies mruby 3.1.0 as affected but does not specify a fixed version or workaround.