{"id":"CVE-2018-12249","details":"An issue was discovered in mruby 1.4.1. There is a NULL pointer dereference in mrb_class_real because \"class BasicObject\" is not properly supported in class.c.","modified":"2026-07-08T17:57:22.772900Z","published":"2018-06-12T14:29:00.460Z","database_specific":{"unresolved_ranges":[{"extracted_events":[{"introduced":"9.0"},{"last_affected":"9.0"}],"source":"CPE_STRING","vendor_product":"debian:debian_linux","cpes":["cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"]}]},"references":[{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2022/05/msg00006.html"},{"type":"REPORT","url":"https://github.com/mruby/mruby/issues/4037"},{"type":"FIX","url":"https://github.com/mruby/mruby/commit/faa4eaf6803bd11669bc324b4c34e7162286bfa3"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/mruby/mruby","events":[{"introduced":"023070a6396233974785a8fd5735b9380a884f27"},{"last_affected":"023070a6396233974785a8fd5735b9380a884f27"},{"fixed":"faa4eaf6803bd11669bc324b4c34e7162286bfa3"}],"database_specific":{"cpe":"cpe:2.3:a:mruby:mruby:1.4.1:*:*:*:*:*:*:*","extracted_events":[{"introduced":"1.4.1"},{"last_affected":"1.4.1"}],"source":["CPE_STRING","REFERENCES"]}}],"versions":["1.4.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-12249.json","vanir_signatures_modified":"2026-07-08T17:57:22Z","vanir_signatures":[{"digest":{"line_hashes":["155455186924564632680250180701856630044","264202324149182625447183625422316271751","94991482216256460482615044015629407054","150556608830758180902443676307007741603","321360138958576321008453714337982509634","243470259043269232215136070449174223738","136177192398406707742052394993833219302"],"threshold":0.9},"id":"CVE-2018-12249-77433845","signature_type":"Line","signature_version":"v1","source":"https://github.com/mruby/mruby/commit/faa4eaf6803bd11669bc324b4c34e7162286bfa3","target":{"file":"src/class.c"},"deprecated":false},{"digest":{"function_hash":"252883612165395493998660936045010458921","length":193},"id":"CVE-2018-12249-b11698cf","signature_type":"Function","signature_version":"v1","source":"https://github.com/mruby/mruby/commit/faa4eaf6803bd11669bc324b4c34e7162286bfa3","target":{"function":"mrb_class_real","file":"src/class.c"},"deprecated":false}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}