CVE-2026-86547 — mrubyc through 4.0.0 NULL Pointer Dereference via OP_ENTER
mrubyc through 4.0.0 contains a null pointer dereference vulnerability in the op_enter() handler in src/vm.c when processing untrusted bytecode. Attackers can craft malicious .m…
Published: 2026-09-09 · CVSS: 6.9 · CVSS 4.0
mrubyc through 4.0.0 contains a null pointer dereference vulnerability in the op_enter() handler in src/vm.c when processing untrusted bytecode. Attackers can craft malicious .mrb bytecode files with OP_ENTER instructions at the top level to crash the embedding application and cause denial of service.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7