{"id":"CVE-2022-0631","summary":"Heap-based Buffer Overflow in mruby/mruby","details":"Heap-based Buffer Overflow in Homebrew mruby prior to 3.2.","modified":"2026-10-22T07:22:09.330282218Z","published":"2022-02-18T13:55:10Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0631.json","cna_assigner":"@huntrdev","cwe_ids":["CWE-122"]},"references":[{"type":"WEB","url":"https://huntr.dev/bounties/9bdc49ca-6697-4adc-a785-081e1961bf40"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0631.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0631"},{"type":"FIX","url":"https://github.com/mruby/mruby/commit/47068ae07a5fa3aa9a1879cdfe98a9ce0f339299"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/mruby/mruby","events":[{"introduced":"0"},{"fixed":"87260e7bb1a9edfb2ce9b41549c4142129061ca5"},{"fixed":"47068ae07a5fa3aa9a1879cdfe98a9ce0f339299"}],"database_specific":{"extracted_events":[{"cpe":"cpe:2.3:a:mruby:mruby:*:*:*:*:*:*:*:*","range":[{"introduced":"0"},{"fixed":"3.2"}],"source":"CPE_RANGE"},{"source":"REFERENCES_COMMIT","range":[{"fixed":"47068ae07a5fa3aa9a1879cdfe98a9ce0f339299"}]}]}}],"versions":["3.0.0-preview","1.2.0","1.1.0","1.0.0"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-0631.json","vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["243309662882086276702655714909276486693","272723878323406354967538782514104337041","121243226226501960812189109070916907127","293478779474975161687901677285577891266","170845495810357436757775838122690288960","67819624772517592286870265287583808527","260149569394654772260247187436470291531"],"threshold":0.9},"id":"CVE-2022-0631-d7acab44","signature_type":"Line","signature_version":"v1","source":"https://github.com/mruby/mruby/commit/47068ae07a5fa3aa9a1879cdfe98a9ce0f339299","target":{"file":"src/vm.c"}},{"deprecated":false,"digest":{"length":1311,"function_hash":"161743637531591569071046463365686133494"},"id":"CVE-2022-0631-dada918e","signature_type":"Function","signature_version":"v1","source":"https://github.com/mruby/mruby/commit/47068ae07a5fa3aa9a1879cdfe98a9ce0f339299","target":{"file":"src/vm.c","function":"mrb_f_send"}}],"vanir_signatures_modified":"2026-10-22T07:22:09Z"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"}]}