Threats tagged 'ghsa-99jr-qh2r-jwfm'

A low-severity security vulnerability (CVE-2025-13397) exists in mrubyc up to version 3.4. The flaw is in the function mrbc_raw_realloc within src/alloc.c, where manipulation of the pointer argument can cause a null pointer dereference. Exploitation requires local access and results in denial of service due to application crash. A patch identified by commit 009111904807b8567262036bf45297c3da8f1c87 is recommended to fix the issue.