CVE-2018-10191

Name of the Vulnerable Software and Affected Versions: mruby versions prior to 1.4.1

Description: The issue is related to an integer overflow in the mrb vm exec() function when handling OP GETUPVAR in the presence of deep scope nesting, resulting in a use-after-free. This could allow an attacker who can cause Ruby code to be run to possibly execute arbitrary code.

Recommendations: For versions prior to 1.4.1, update to version 1.4.1 or later to resolve the issue.