Memory Corruption

Every one of the 42 is a mark on the map. Named now: 1 to 26, most at risk first.

1. In versions of mruby up to and including 1.4.0, an integer overflow exists in src/vm.c::mrb_vm_exec() when handling OP_GETUPVAR in the presence of deep scope nesting, resulting in…CVE-2018-10191Mruby · 2.6% likely

   CWE-190

2. In versions of mruby up to and including 1.4.0, a use-after-free vulnerability exists in src/io.c::File#initilialize_copy(). An attacker that can cause Ruby code to be run can pos…CVE-2018-10199Mruby · 2.3% likely

   CWE-416

3. The init_copy function in kernel.c in mruby 1.4.1 makes initialize_copy calls for TT_ICLASS objects, which allows attackers to cause a denial of service (mrb_hash_keys uninitializ…CVE-2018-11743Mruby · 2.2% likely

   CWE-824

4. mruby through 2.1.2-rc has a heap-based buffer overflow in the mrb_yield_with_class function in vm.c because of incorrect VM stack handling. It can be triggered via the stack_copy…CVE-2020-15866Mruby · 2.1% likely

   CWE-787

5. An issue was discovered in mruby 1.4.1. There is a NULL pointer dereference in mrb_class_real because "class BasicObject" is not properly supported in class.c.CVE-2018-12249Mruby · 2.1% likely

   CWE-476

6. Use-After-Free in str_escape in mruby/mruby in mruby/mrubyCVE-2022-1212mruby · CVSS 9.3 · 1.8% likely

   CWE-416

7. NULL Pointer Dereference in mruby/mrubyCVE-2021-4110mruby · CVSS 9.1 · 1.7% likely

   CWE-476

8. Out-of-bounds Read in mruby/mrubyCVE-2022-0623mruby · CVSS 6.5 · 1.6% likely

   CWE-125

9. Heap-based Buffer Overflow in mruby/mrubyCVE-2022-0080mruby · CVSS 8.2 · 1.6% likely

   CWE-122

10. Out-of-bounds Read in mrb_get_args in mruby/mrubyCVE-2022-1276mruby · CVSS 8.4 · 1.6% likely

    CWE-125

11. In mruby 2.1.0, there is a use-after-free in hash_slice in mrbgems/mruby-hash-ext/src/hash-ext.c.CVE-2020-6840Mruby · 1.5% likely

    CWE-416

12. In mruby 2.1.0, there is a use-after-free in hash_values_at in mrbgems/mruby-hash-ext/src/hash-ext.c.CVE-2020-6838Mruby · 1.5% likely

    CWE-416

13. An issue was discovered in mruby 1.4.1. There is a heap-based buffer over-read associated with OP_ENTER because mrbgems/mruby-fiber/src/fiber.c does not extend the stack in cases…CVE-2018-12248Mruby · 1.5% likely

    CWE-125

14. An issue was discovered in mruby 1.4.1. There is a NULL pointer dereference in mrb_class, related to certain .clone usage, because mrb_obj_clone in kernel.c copies flags other tha…CVE-2018-12247Mruby · 1.5% likely

    CWE-476

15. In mruby 2.1.0, there is a stack-based buffer overflow in mrb_str_len_to_dbl in string.c.CVE-2020-6839Mruby · 1.4% likely

    CWE-787

16. The CHECK macro in mrbgems/mruby-sprintf/src/sprintf.c in mruby 1.4.1 contains a signed integer overflow, possibly leading to out-of-bounds memory access because the mrb_str_resiz…CVE-2018-14337Mruby · 1.4% likely

    CWE-190

17. Heap-based Buffer Overflow in mruby/mrubyCVE-2022-0570mruby · CVSS 8.4 · 1.2% likely

    CWE-122

18. heap-buffer-overflow in mrb_vm_exec in mruby/mruby in mruby/mrubyCVE-2022-1286mruby · CVSS 5.9 · 1.2% likely

    CWE-122

19. Out-of-bounds Read in mruby/mrubyCVE-2022-0525mruby · CVSS 8.4 · 1.2% likely

    CWE-125

20. An untrusted pointer dereference in mrb_vm_exec() of mruby v3.0.0 can lead to a segmentation fault or application crash.CVE-2021-46020Mruby · 1.1% likely

    CWE-119

21. NULL Pointer Dereference in mruby/mrubyCVE-2022-0240mruby · CVSS 6.2 · 1.0% likely

    CWE-476

22. Out-of-bounds Read in mruby/mrubyCVE-2022-0630mruby · CVSS 7.1 · 1.0% likely

    CWE-125

23. mruby 2.1.2 has a double free in mrb_default_allocf (called from mrb_free and obj_free).CVE-2020-36401Mruby · 1.0% likely

    CWE-415

24. use after free in mrb_vm_exec in mruby/mrubyCVE-2022-1106mruby · CVSS 7.2 · 1.0% likely

    CWE-416

25. The mark_context_stack function in gc.c in mruby through 1.2.0 allows attackers to cause a denial of service (heap-based use-after-free and application crash) or possibly have uns…CVE-2017-9527Mruby · 1.0% likely

    CWE-416

26. Heap-based Buffer Overflow in mruby/mrubyCVE-2022-0631mruby · CVSS 5.9 · 0.9% likely

    CWE-122

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.