← All advisories

Critical severity9.8NVD Advisory· Published Apr 5, 2022· Updated Jun 17, 2026

CVE-2022-1212

CVE-2022-1212

Description

Use-After-Free in str_escape in mruby/mruby in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6

Mruby/Mrubyllm-fuzzy5 versions
<3.2+ 4 more
- (no CPE)range: <3.2
- cpe:2.3:a:mruby:mruby:*:*:*:*:*:*:*:*range: <=3.0.0
- cpe:2.3:a:mruby:mruby:3.1.0:rc:*:*:*:*:*:*
- cpe:2.3:a:mruby:mruby:3.1.0:rc2:*:*:*:*:*:*
- (no CPE)range: unspecified
osv-coords
pkg:rpm/opensuse/mruby&distro=openSUSE%20Tumbleweed
Range: < 3.0.0-6.1

Patches

Vulnerability mechanics

References

2

github.com/mruby/mruby/commit/3cf291f72224715942beaf8553e42ba8891ab3c6nvdPatchThird Party Advisory
huntr.dev/bounties/9fcc06d0-08e4-49c8-afda-2cae40946abenvdExploitIssue TrackingPatchThird Party Advisory

News mentions

0

No linked articles in our index yet.