CVE-2025-13397

Low

Description

A security vulnerability has been detected in mrubyc up to 3.4. This impacts the function mrbc_raw_realloc of the file src/alloc.c. Such manipulation of the argument ptr leads to null pointer dereference. An attack has to be approached locally. The name of the patch is 009111904807b8567262036bf45297c3da8f1c87. It is advisable to implement a patch to correct this issue.

SeverityLow

CVSS3.3

Exploit probability—

ProductS-itoc Mruby\/c

PublishedNov 19, 2025

First seenNov 19, 2025

Weakness typeCWE-476NULL pointer dereference CWE-404CWE-404

How to fix

Patches

github.com/mrubyc/mrubyc/commit/009111904807b8567262036bf45297c3da8f1c87

Affected products

Product	Affected versions	Fixed in
s-itoc mruby\/c	v ≤ 3.4	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.