Medium severity · published Jul 9, 2025
CVE-2025-7207
mruby nregs codegen.c scope_new heap-based overflow
5.5
CVSS
0.3%
EPSS
No
On KEV
Description
A vulnerability, which was classified as problematic, was found in mruby up to 3.4.0-rc2. Affected is the function scope_new of the file mrbgems/mruby-compiler/core/codegen.c of the component nregs Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The name of the patch is 1fdd96104180cc0fb5d3cb086b05ab6458911bb9. It is recommended to apply a patch to fix this issue.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 18% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MR
mruby ·
3.4.0-rc1; 3.4.0-rc2 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-7207
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-7207
Patch
https://github.com/mruby/mruby/commit/1fdd96104180cc0fb5d3cb086b05ab6458911bb9
Exploit
https://github.com/mruby/mruby/issues/6509
Exploit
https://github.com/mruby/mruby/issues/6509#event-17145516649
Exploit
https://github.com/user-attachments/files/19619499/mruby_crash.txt
Permissions Required
https://vuldb.com/?ctiid.315156
Third Party Advisory
https://vuldb.com/?id.315156
