{"id":"CVE-2022-1934","summary":"Use After Free in mruby/mruby","details":"Use After Free in GitHub repository mruby/mruby prior to 3.2.","modified":"2026-08-12T12:59:27.962106Z","published":"2022-05-31T02:20:12Z","database_specific":{"cwe_ids":["CWE-416"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1934.json","cna_assigner":"@huntrdev"},"references":[{"type":"WEB","url":"https://huntr.dev/bounties/99e6df06-b9f7-4c53-a722-6bb89fbfb51f"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1934.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1934"},{"type":"FIX","url":"https://github.com/mruby/mruby/commit/aa7f98dedb68d735a1665d3a289036c88b0c47ce"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/mruby/mruby","events":[{"introduced":"0"},{"fixed":"87260e7bb1a9edfb2ce9b41549c4142129061ca5"},{"fixed":"aa7f98dedb68d735a1665d3a289036c88b0c47ce"}],"database_specific":{"cpe":"cpe:2.3:a:mruby:mruby:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"3.2"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["3.2.0-rc4","3.2.0-rc3","3.2.0-rc2","3.2.0-rc","3.0.0-preview","1.2.0","1.1.0","1.0.0"],"database_specific":{"vanir_signatures_modified":"2026-08-12T12:59:27Z","vanir_signatures":[{"digest":{"function_hash":"228046252783871179793793407303876292574","length":218},"id":"CVE-2022-1934-3ba0db0a","signature_type":"Function","signature_version":"v1","source":"https://github.com/mruby/mruby/commit/aa7f98dedb68d735a1665d3a289036c88b0c47ce","target":{"file":"src/vm.c","function":"hash_new_from_values"},"deprecated":false},{"deprecated":false,"digest":{"line_hashes":["152646836210282485599539177532752390045","328745726342371975341739967845990729603","317448166676620121194425141673342145233","23796532373482981551938411155767405517","232786493497584733865025881557944237316","145193460640162732498379922235575540945","100423029127676833598851775167480746290","115276107549753745073110851086789472985","283539110421462180510356750736553578340","103152518877744765296617869807890105849","138284677015983379118482011857608180541","229588996145419855683097468330582834487","235182077647615667294479547327419440287","40371108780796750799906450227317291214","144870514071467859756944700187489446927","36315798296801244431937715181889192803","211746228229988383927775462717158822371","152563859919068298990696206676681561313","236939723448661169107537048371478349052","66576657464857587495795253487828495186"],"threshold":0.9},"id":"CVE-2022-1934-773e0217","signature_type":"Line","signature_version":"v1","source":"https://github.com/mruby/mruby/commit/aa7f98dedb68d735a1665d3a289036c88b0c47ce","target":{"file":"src/vm.c"}}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-1934.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L"}]}