shopify-scripts · Report #205536
Use After Free in mrb_vm_exec
Validstatus
$800bounty
3upvotes
28 Feb 2017disclosed
Summary
@ssarong reported the following crash in MRuby: https://github.com/mruby/mruby/issues/3465
The issue was patched in https://github.com/mruby/mruby/commit/9e93d5dbf0c96cbf5cc0bc5a9c5f734248d7c37b
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.