cvedb.io
CVE-2018-12248
HIGH · CVSS 7.5
EPSS exploitation probability: 0%
Published 2018-06-12T14:29:00.400 · Last modified 2026-06-17T01:37:25.537

Summary

An issue was discovered in mruby 1.4.1. There is a heap-based buffer over-read associated with OP_ENTER because mrbgems/mruby-fiber/src/fiber.c does not extend the stack in cases of many arguments to fiber.

Affected products

mruby — mruby

Does this affect you?

Add your gear to cvedb and we'll alert you only when mruby ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.