PT-2025-47462 · Mrubyc · Mrubyc

Micromilo · Published 2025-11-19 · Updated 2025-12-01 · CVE-2025-13397

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions mrubyc versions prior to 3.4

Description A security issue exists in mrubyc. The mrbc raw realloc function within the src/alloc.c file is susceptible to a null pointer dereference when the ptr argument is manipulated. This requires local access to exploit.

Recommendations Implement the patch 009111904807b8567262036bf45297c3da8f1c87 to correct this issue.

Fix

Improper Resource Release

NULL Pointer Dereference

Weakness Enumeration

CWE-404

CWE-476

Related Identifiers

CVE-2025-13397

Affected Products

Mrubyc

References · 11

• https://github.com/mrubyc/mrubyc/commit/009111904807b8567262036bf45297c3da8f1c87 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-13397 · Security Note
• https://osv.dev/vulnerability/CVE-2025-13397 · Vendor Advisory
• https://github.com/mrubyc/mrubyc/issues/244#issuecomment-3400382026 · Note
• https://github.com/mrubyc/mrubyc/issues/244 · Note
• https://t.me/cveNotify/143384 · Telegram Post
• https://vuldb.com/?ctiid.332925 · Note
• https://twitter.com/dailycve/status/1995616944167538915 · Twitter Post
• https://vuldb.com/?id.332925 · Note
• https://twitter.com/CVEnew/status/1991187298940244020 · Twitter Post
• https://vuldb.com/?submit.692130 · Note