← All advisories

High severity7.8NVD Advisory· Published Jul 1, 2021· Updated Jun 17, 2026

CVE-2020-36401

CVE-2020-36401

Description

mruby 2.1.2 has a double free in mrb_default_allocf (called from mrb_free and obj_free).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Mruby/Mruby2 versions
cpe:2.3:a:mruby:mruby:2.1.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:mruby:mruby:2.1.2:*:*:*:*:*:*:*
- (no CPE)range: =2.1.2
mruby/mrubydescription

Patches

Vulnerability mechanics

References

3

github.com/mruby/mruby/commit/97319697c8f9f6ff27b32589947e1918e3015503nvdPatchThird Party Advisory
bugs.chromium.org/p/oss-fuzz/issues/detailnvdExploitIssue TrackingPatchThird Party Advisory
github.com/google/oss-fuzz-vulns/blob/main/vulns/mruby/OSV-2020-744.yamlnvdThird Party Advisory

News mentions

0

No linked articles in our index yet.