CVE-2022-1934

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2022-1934

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-1934.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2022-1934

Downstream

UBUNTU-CVE-2022-1934

Published

2022-05-31T02:20:12Z

Modified

2026-07-22T02:23:19.251341Z

Severity

5.1 (Medium) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L CVSS Calculator

Summary

Use After Free in mruby/mruby

Details

Use After Free in GitHub repository mruby/mruby prior to 3.2.

Database specific

{
    "cna_assigner": "@huntrdev",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1934.json",
    "cwe_ids": [
        "CWE-416"
    ]
}

References

Affected packages

Git / github.com/mruby/mruby

Affected ranges

Type

GIT

Repo

https://github.com/mruby/mruby

Events

Introduced

Fixed

87260e7bb1a9edfb2ce9b41549c4142129061ca5

Fixed

aa7f98dedb68d735a1665d3a289036c88b0c47ce

Database specific

{
    "cpe": "cpe:2.3:a:mruby:mruby:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "3.2"
        }
    ],
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Affected versions

1.*

1.0.0

1.1.0

1.2.0

3.*

3.0.0-preview

3.2.0-rc

3.2.0-rc2

3.2.0-rc3

3.2.0-rc4

Database specific

vanir_signatures_modified

"2026-07-22T02:23:19Z"

vanir_signatures

[
    {
        "target": {
            "function": "hash_new_from_values",
            "file": "src/vm.c"
        },
        "id": "CVE-2022-1934-3ba0db0a",
        "digest": {
            "function_hash": "228046252783871179793793407303876292574",
            "length": 218.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://github.com/mruby/mruby/commit/aa7f98dedb68d735a1665d3a289036c88b0c47ce"
    },
    {
        "target": {
            "file": "src/vm.c"
        },
        "id": "CVE-2022-1934-773e0217",
        "digest": {
            "line_hashes": [
                "152646836210282485599539177532752390045",
                "328745726342371975341739967845990729603",
                "317448166676620121194425141673342145233",
                "23796532373482981551938411155767405517",
                "232786493497584733865025881557944237316",
                "145193460640162732498379922235575540945",
                "100423029127676833598851775167480746290",
                "115276107549753745073110851086789472985",
                "283539110421462180510356750736553578340",
                "103152518877744765296617869807890105849",
                "138284677015983379118482011857608180541",
                "229588996145419855683097468330582834487",
                "235182077647615667294479547327419440287",
                "40371108780796750799906450227317291214",
                "144870514071467859756944700187489446927",
                "36315798296801244431937715181889192803",
                "211746228229988383927775462717158822371",
                "152563859919068298990696206676681561313",
                "236939723448661169107537048371478349052",
                "66576657464857587495795253487828495186"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "source": "https://github.com/mruby/mruby/commit/aa7f98dedb68d735a1665d3a289036c88b0c47ce"
    }
]

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-1934.json"