shopify-scripts · Report #196819
Heap Buffer overflow in mrb_funcall_with_block
Validstatus
lowseverity
$800bounty
5upvotes
27 Feb 2017disclosed
Summary
@ssarong discovered a heap buffer overflow vulnerability in MRuby. The issue was reported upstream in https://github.com/mruby/mruby/issues/3398 and fixed in https://github.com/mruby/mruby/commit/a3571240e5fdbdac9210be27e2445e3f82239f44.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.