提交 #683435: mruby 3.4.0 Use After Free
| 标题 | mruby 3.4.0 Use After Free |
|---|---|
| 描述 | Shrinking an array from a user-defined comparator during Array#sort! could lead to a use-after-realloc. The vulnerability was patched in commit eb398971bfb43c38db3e04528b68ac9a7ce509bc. |
| 来源 | ⚠️ https:/ |
| 用户 | tjbecker (UID 91943) |
| 提交 | 2025-10-27 17時49分 (11 月前) |
| 管理 | 2025-11-13 10時07分 (17 days later) |
| 状态 | 已接受 |
| VulDB条目 | 332325 [mruby 直到 3.4.0 src/array.c sort_cmp 内存损坏] |
| 积分 | 15 |