提交 #680879: mruby 3.4.0 Out-of-bounds Write

Calling Array#__fill_exec with a negative start and positive length in Ruby code would lead to a buffer underflow and out-of-bounds write. The vulnerability was patched in commit 93619f06dd378db6766666b30c08978311c7ec94

• 来源: ⚠️ https://github.com/mruby/mruby/issues/6650
• 用户: tjbecker (UID 91943)
• 提交: 2025-10-23 05時12分 (1 年前)
• 管理: 2025-11-07 16時09分 (15 days later)
• 状态: 已接受
• VulDB条目: 331511 [mruby 3.4.0 array.c ary_fill_exec start/length 内存损坏]
• 积分: 17