CVE-2022-0630

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

Out-of-bounds Read in Homebrew mruby prior to 3.2.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-125

Affected software

VendorProductVersions
mrubymruby/mruby>= unspecified, < 3.2

References

Timeline

Published
Feb 19, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-06319.8Heap-based Buffer Overflow in Homebrew mruby prior to 3.2.CVE-2022-06325.5NULL Pointer Dereference in Homebrew mruby prior to 3.2.CVE-2022-06336.5The UpdraftPlus WordPress plugin Free before 1.22.3 and Premium before 2.22.3 do not properly validate a user has the required privileges toCVE-2022-06344.3The ThirstyAffiliates WordPress plugin before 3.10.5 lacks authorization checks in the ta_insert_external_image action, allowing a low-priviCVE-2022-06357.5Versions affected: BIND 9.18.0 When a vulnerable version of named receives a series of specific queries, the named process will eventually tCVE-2022-06365.5A denial of service vulnerability was reported in Lenovo Thin Installer prior to version 1.3.0039 that could trigger a system crash.CVE-2022-06376.1open redirect in pollbot (pollbot.services.mozilla.com) in versions before 1.4.6CVE-2022-06384.3Cross-Site Request Forgery (CSRF) in Packagist microweber/microweber prior to 1.2.11.CVE-2022-06395.3Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.7.CVE-2022-06406.1The Pricing Table Builder WordPress plugin before 1.1.5 does not sanitize and escape the postid parameter before outputting it back in an adCVE-2022-06416.1The Popup Like box WordPress plugin before 3.6.1 does not sanitize and escape the ays_fb_tab parameter before outputting it back in an adminCVE-2022-06425.4The JivoChat Live Chat WordPress plugin before 1.3.5.4 does not properly check CSRF tokens on POST requests to the plugins admin page, and d
CVE-2022-0630: High severity, CVSS 7.1 | Vulnix