Description

A vulnerability, which was classified as problematic, was found in mruby up to 3.4.0-rc2. Affected is the function scope_new of the file mrbgems/mruby-compiler/core/codegen.c of the component nregs Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The name of the patch is 1fdd96104180cc0fb5d3cb086b05ab6458911bb9. It is recommended to apply a patch to fix this issue.

INFO

Published Date :

2025-07-09T00:02:07.237Z

Last Modified :

2025-07-09T13:08:10.538Z

Source :

VulDB
AFFECTED PRODUCTS

The following products are affected by CVE-2025-7207 vulnerability.

Vendors Products
Mruby
  • Mruby
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-7207.

URL Resource
https://github.com/mruby/mruby/commit/1fdd96104180cc0fb5d3cb086b05ab6458911bb9 cve-icon cve-icon cve-icon
https://github.com/mruby/mruby/issues/6509 cve-icon cve-icon cve-icon cve-icon
https://github.com/mruby/mruby/issues/6509#event-17145516649 cve-icon cve-icon cve-icon
https://github.com/user-attachments/files/19619499/mruby_crash.txt cve-icon cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-7207 cve-icon
https://vuldb.com/?ctiid.315156 cve-icon cve-icon cve-icon
https://vuldb.com/?id.315156 cve-icon cve-icon cve-icon
https://vuldb.com/?submit.607683 cve-icon cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-7207 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Attack Requirements
Privileges Required
User Interaction
VS Confidentiality
VS Integrity
VS Availability
SS Confidentiality
SS Integrity
SS Availability
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact
Detailed values of each vector for above chart.
Access Vector
Access Complexity
Authentication
Confidentiality Impact
Integrity Impact
Availability Impact