Mrubyc vulnerabilities
Published CVEs affecting Mrubyc products: 1 record(s), with severity, exploitation and fixes.
CVE-2026-86547
Medium · 6.2
CWE-476 Sep 9, 2026
mrubyc through 4.0.0 NULL Pointer Dereference via OP_ENTER
mrubyc through 4.0.0 contains a null pointer dereference vulnerability in the op_enter() handler in src/vm.c when processing untrusted bytecode. Attackers can craft malicious .mrb bytecode files with OP_ENTER instructions at the top level to crash the embedding application and cause denial of service.