Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw has been found in mruby up to 3.4.0. This affects the function mrb_vm_exec of the file src/vm.c of the component JMPNOT-to-JMPIF Optimization. Executing a manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been published and may be used. This patch is called e50f15c1c6e131fa7934355eb02b8173b13df415. It is advisable to implement a patch to correct this issue.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-1979 Local Use-After-Free Vulnerability in mruby VM Execution Function Up to 3.4.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-1979
Post summary
The text announces a local use‑after‑free flaw in mruby VM execution functions affecting versions up to 3.4.0, with a link to a vulnerability detail page.
CVE-2026-1979 A flaw has been found in mruby up to 3.4.0. This affects the function mrb_vm_exec of the file src/vm.c of the component JMPNOT-to-JMPIF Optimization. Executing a manipu… https://www.cve.org/CVERecord?id=CVE-2026-1979
Post summary
CVE-2026-1979 is a flaw in mruby’s VM execution logic affecting versions up to 3.4.0, specifically the mrb_vm_exec function in src/vm.c within the JMPNOT-to-JMPIF optimization. No PoC, exploit, or patch information is provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mruby | mruby | - | ruby | - |