| タイトル | mruby 3.1.0 Floating Point Exception |
|---|
| 説明 | A Floating Point Exception vulnerability exists in the mruby/mruby repository due to improper handling of specific mathematical operations or input parsing within the core engine. An attacker can exploit this security flaw by providing a crafted script or inputs that trigger undefined behavior, such as a division by zero or an unhandled arithmetic overflow during float/numeric handling. This can cause the mruby interpreter to crash unexpectedly, resulting in a denial of service (DoS) state for applications embedding the engine. The vulnerability was verified, publicly disclosed, and resolved via the huntr.com platform back in 2022. This submission is made to retroactively assign a historical CVE identifier for proper vulnerability compliance and tracking. |
|---|
| ソース | ⚠️ https://huntr.com/bounties/5a5092df-1699-4497-a8b2-38318bce0c4e |
|---|
| ユーザー | jacky2001114 (UID 99483) |
|---|
| 送信 | 2026年07月02日 06:02 (2 月 ago) |
|---|
| モデレーション | 2026年08月17日 20:46 (2 months later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 391391 [mruby 3.1.0 bigint.c udiv サービス拒否] |
|---|
| ポイント | 20 |
|---|