| 标题 | mruby 3.1.0 Floating Point Exception |
|---|
| 描述 | A Floating Point Exception vulnerability exists in the mruby/mruby repository due to improper handling of specific mathematical operations or input parsing within the core engine. An attacker can exploit this security flaw by providing a crafted script or inputs that trigger undefined behavior, such as a division by zero or an unhandled arithmetic overflow during float/numeric handling. This can cause the mruby interpreter to crash unexpectedly, resulting in a denial of service (DoS) state for applications embedding the engine. The vulnerability was verified, publicly disclosed, and resolved via the huntr.com platform back in 2022. This submission is made to retroactively assign a historical CVE identifier for proper vulnerability compliance and tracking. |
|---|
| 来源 | ⚠️ https://huntr.com/bounties/5a5092df-1699-4497-a8b2-38318bce0c4e |
|---|
| 用户 | jacky2001114 (UID 99483) |
|---|
| 提交 | 2026-07-02 06時02分 (2 月前) |
|---|
| 管理 | 2026-08-17 20時46分 (2 months later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 391391 [mruby 3.1.0 bigint.c udiv 拒绝服务] |
|---|
| 积分 | 20 |
|---|