CVE-2026-86547 | BDVDB-2026-370783 Detail

Description#

mrubyc through 4.0.0 contains a null pointer dereference vulnerability in the op_enter() handler in src/vm.c when processing untrusted bytecode. Attackers can craft malicious .mrb bytecode files with OP_ENTER instructions at the top level to crash the embedding application and cause denial of service.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-09-09Record published in the CVE List.