Log in Start free

Vulnerability · Published Nov 7, 2025 · Assigned by VulDB

CVE-2025-12875mruby array.c ary_fill_exec out-of-bounds write

Medium 5.3

In plain English

A medium-severity out-of-bounds write in mruby. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 7% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.2%top 93.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

A weakness has been identified in mruby 3.4.0. This vulnerability affects the function ary_fill_exec of the file mrbgems/mruby-array-ext/src/array.c. Executing a manipulation of the argument start/length can lead to out-of-bounds write. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. This patch is called 93619f06dd378db6766666b30c08978311c7ec94. It is best practice to apply a patch to resolve this issue.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12mrubyno fix listedDEBIAN-CVE-2025-12875
Debian:13mrubyno fix listedDEBIAN-CVE-2025-12875
Debian:14mrubyno fix listedDEBIAN-CVE-2025-12875
Ubuntu:22.04:LTSmrubyno fix listedUBUNTU-CVE-2025-12875
Ubuntu:24.04:LTSmrubyno fix listedUBUNTU-CVE-2025-12875
Ubuntu:25.10mrubyno fix listedUBUNTU-CVE-2025-12875
Ubuntu:26.04:LTSmrubyno fix listedUBUNTU-CVE-2025-12875
Ubuntu:26.10mrubyno fix listedUBUNTU-CVE-2025-12875

Affected products (as reported)

VendorProductVersions
n/a mruby 3.4.0

Weakness: CWE-787, CWE-119 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C

References