CyberRota Analysis
AI-GeneratedThe vulnerability in mrubyc versions up to 4.0.0 allows attackers to exploit a null pointer dereference in the op_enter() handler, which can be triggered by processing specially crafted .mrb bytecode files. This can lead to application crashes and result in a denial of service. Developers and organizations using mrubyc should prioritize patching this vulnerability to mitigate potential disruptions to their applications.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
mrubyc through 4.0.0 contains a null pointer dereference vulnerability in the op_enter() handler in src/vm.c when processing untrusted bytecode. Attackers can craft malicious .mrb bytecode files with OP_ENTER instructions at the top level to crash the embedding application and cause denial of service.