{"id":"CVE-2018-10199","details":"In versions of mruby up to and including 1.4.0, a use-after-free vulnerability exists in src/io.c::File#initilialize_copy(). An attacker that can cause Ruby code to be run can possibly use this to execute arbitrary code.","modified":"2026-07-08T14:59:02.167961Z","published":"2018-04-18T15:29:00.207Z","references":[{"type":"ADVISORY","url":"https://github.com/mruby/mruby/issues/4001"},{"type":"FIX","url":"https://github.com/mruby/mruby/commit/b51b21fc63c9805862322551387d9036f2b63433"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/mruby/mruby","events":[{"introduced":"0"},{"last_affected":"58fb6f421ad9824caae5a2cabb849d48647b90ec"},{"fixed":"b51b21fc63c9805862322551387d9036f2b63433"}],"database_specific":{"cpe":"cpe:2.3:a:mruby:mruby:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"1.4.0"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["1.4.0","1.2.0","1.1.0","1.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-10199.json","vanir_signatures_modified":"2026-07-08T14:59:02Z","vanir_signatures":[{"id":"CVE-2018-10199-3968ad5e","signature_type":"Function","signature_version":"v1","source":"https://github.com/mruby/mruby/commit/b51b21fc63c9805862322551387d9036f2b63433","target":{"file":"mrbgems/mruby-io/src/io.c","function":"mrb_io_initialize_copy"},"deprecated":false,"digest":{"function_hash":"176470287796102068116200247742974157189","length":1032}},{"deprecated":false,"digest":{"line_hashes":["26428399209722362404772608474695113136","222149713925856606992976566986370645464","242975534844887006541029859650857140185","283945130415032626426675985272024724847","113971097661674165332142934430449657499","31486327155438268750255794855118764637","333268945746951759752781923786946114447","84224174781620867617528170324289898103","160934137204212079820212675447251727175","98899778162484268282287483093347673153","29675728426105141391949315817511663971"],"threshold":0.9},"id":"CVE-2018-10199-74069e8a","signature_type":"Line","signature_version":"v1","source":"https://github.com/mruby/mruby/commit/b51b21fc63c9805862322551387d9036f2b63433","target":{"file":"mrbgems/mruby-io/src/io.c"}}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}