What’s Vulnerable › Vulnerabilities

CVE-2018-12247

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-06-12 · updated 2026-06-17
• Weakness: CWE-476

Description

An issue was discovered in mruby 1.4.1. There is a NULL pointer dereference in mrb_class, related to certain .clone usage, because mrb_obj_clone in kernel.c copies flags other than the MRB_FLAG_IS_FROZEN flag (e.g., the embedded flag).

Affected products

• mruby/mruby: 1.4.1

References

• https://github.com/mruby/mruby/commit/55edae0226409de25e59922807cb09acb45731a2
• https://github.com/mruby/mruby/issues/4036
• https://github.com/mruby/mruby/commit/55edae0226409de25e59922807cb09acb45731a2
• https://github.com/mruby/mruby/issues/4036

Get alerted when CVE-2018-12247 or the next vulnerability affects your stack