CVE-2025-13397: mrubyc alloc.c mrbc_raw_realloc null pointer dereference
A security vulnerability has been detected in mrubyc up to 3.4. This impacts the function mrbcrawrealloc of the file src/alloc.c. Such manipulation of the argument ptr leads to null pointer dereference. An attack has to be approached locally. The name of the patch is 009111904807b8567262036bf45297c3da8f1c87. It is advisable to implement a patch to correct this issue.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13397?
CVE-2025-13397 has been classified as a local null pointer dereference vulnerability impacting mrubyc up to version 3.4.
How do I fix CVE-2025-13397?
To fix CVE-2025-13397, update mrubyc to the latest version beyond 3.4 that includes the patch 009111904807b8.
Which versions of mrubyc are affected by CVE-2025-13397?
CVE-2025-13397 affects mrubyc versions up to and including 3.4.
Can CVE-2025-13397 be exploited remotely?
No, CVE-2025-13397 requires local access to exploit the vulnerability.
What component of mrubyc does CVE-2025-13397 impact?
CVE-2025-13397 impacts the mrbc_raw_realloc function in the src/alloc.c file of mrubyc.