{"id":"CVE-2021-4110","details":"mruby is vulnerable to NULL Pointer Dereference","modified":"2026-07-09T00:37:06.514358Z","published":"2021-12-15T05:15:08.323Z","related":["openSUSE-SU-2024:11684-1"],"references":[{"type":"FIX","url":"https://github.com/mruby/mruby/commit/f5e10c5a79a17939af763b1dcf5232ce47e24a34"},{"type":"FIX","url":"https://huntr.dev/bounties/4ce5dc47-2512-4c87-8609-453adc8cad20"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/mruby/mruby","events":[{"introduced":"0"},{"fixed":"1bec3392300e99ea037a8e18aa9694c83390cea3"},{"fixed":"f5e10c5a79a17939af763b1dcf5232ce47e24a34"}],"database_specific":{"cpe":"cpe:2.3:a:mruby:mruby:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"3.1"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["3.1.0-rc2","3.1.0-rc","3.0.0-preview","1.2.0","1.1.0","1.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-4110.json","vanir_signatures_modified":"2026-07-09T00:37:06Z","vanir_signatures":[{"digest":{"threshold":0.9,"line_hashes":["81744613183312713194633498232241774221","76472689784672277773918762623261264376","338432730937460252987214635049606623656","38052211126622076645216110611359721483","315563396418531360526183761440176085399","210172266487238526245621704828340819147","276729272281913215123254139623753372139","321835851428529090526107069021294414619","228297072417968426637809754933694082842","56409279269911148357986650262569537814","245659391275582475787777387061209053749","139344808500617260219342182204933904756","65587960909726825423486840593725788251","121877422886173124221829006259191227271","228199434602422096300238934284335959329","91221933838093434937892977919638859936","116049066758881167759115994756842185546","54628713840288311888901628046362513501","85820946849108014322776812196924650503","112070244442245628114016658775701643324","119219949876642531913324921046361755735","196268886614353941434219942095847584898","299088664775889351272758458788707710858","41037638100009743519158351735197724954"]},"id":"CVE-2021-4110-2d9b628b","signature_type":"Line","signature_version":"v1","source":"https://github.com/mruby/mruby/commit/f5e10c5a79a17939af763b1dcf5232ce47e24a34","target":{"file":"src/proc.c"},"deprecated":false},{"digest":{"function_hash":"170839887295996789417340302966067123088","length":342},"id":"CVE-2021-4110-381c1074","signature_type":"Function","signature_version":"v1","source":"https://github.com/mruby/mruby/commit/f5e10c5a79a17939af763b1dcf5232ce47e24a34","target":{"file":"src/proc.c","function":"mrb_proc_copy"},"deprecated":false},{"id":"CVE-2021-4110-3aa92957","signature_type":"Function","signature_version":"v1","source":"https://github.com/mruby/mruby/commit/f5e10c5a79a17939af763b1dcf5232ce47e24a34","target":{"file":"src/proc.c","function":"proc_lambda"},"deprecated":false,"digest":{"function_hash":"333984905399964442490591956898359583944","length":532}},{"target":{"file":"src/class.c","function":"mrb_mod_define_method_m"},"deprecated":false,"digest":{"function_hash":"67351281157542190297845346545570442046","length":734},"id":"CVE-2021-4110-6435b621","signature_type":"Function","signature_version":"v1","source":"https://github.com/mruby/mruby/commit/f5e10c5a79a17939af763b1dcf5232ce47e24a34"},{"target":{"file":"src/proc.c","function":"mrb_proc_s_new"},"deprecated":false,"digest":{"function_hash":"312539215175154444098184872836006702823","length":504},"id":"CVE-2021-4110-9bf7a252","signature_type":"Function","signature_version":"v1","source":"https://github.com/mruby/mruby/commit/f5e10c5a79a17939af763b1dcf5232ce47e24a34"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/mruby/mruby/commit/f5e10c5a79a17939af763b1dcf5232ce47e24a34","target":{"file":"include/mruby/proc.h"},"deprecated":false,"digest":{"line_hashes":["340199511158654564253661211061351390579","288046828259962987256747164884810810649","224379878099833040117921309580121891429","142881671413833203139227836027245281770"],"threshold":0.9},"id":"CVE-2021-4110-b6fc4a57"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/mruby/mruby/commit/f5e10c5a79a17939af763b1dcf5232ce47e24a34","target":{"file":"src/proc.c","function":"mrb_proc_init_copy"},"deprecated":false,"digest":{"function_hash":"312426368257420074825662672108432576495","length":243},"id":"CVE-2021-4110-e3504b69"},{"deprecated":false,"digest":{"line_hashes":["83886911781544201250485209751989989607","261506501903813121030359324506337859499","232818955340439950056121019440172398908","314041811696983465427387200341854665636"],"threshold":0.9},"id":"CVE-2021-4110-f43053b6","signature_type":"Line","signature_version":"v1","source":"https://github.com/mruby/mruby/commit/f5e10c5a79a17939af763b1dcf5232ce47e24a34","target":{"file":"src/class.c"}}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}