Vulnerabilities > CVE-2017-9527 - Use After Free vulnerability in multiple products

047910
CVSS 7.8 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
local
low complexity
mruby
debian
CWE-416
NVD
Published: 2017-06-11
Updated: 2024-11-21

Summary

The mark_context_stack function in gc.c in mruby through 1.2.0 allows attackers to cause a denial of service (heap-based use-after-free and application crash) or possibly have unspecified other impact via a crafted .rb file.

Vulnerable Configurations

Part Description Count
Application
Mruby
8
OS
Debian
1

Common Weakness Enumeration (CWE)

References