一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月9日

CVE-2026-86547 [MEDIUM] – mrubyc through 4.0.0 contains a null pointer dereference vulnerability in the op_enter() h

未分类
📑 文章目录

mrubyc through 4.0.0 contains a null pointer dereference vulnerability in the op_enter() handler in src/vm.c when processing untrusted bytecode. Attackers can craft malicious .mrb bytecode files with OP_ENTER instructions at the top level to crash the embedding application and cause denial of service.