high7.5
CVE-2026-38976
mrubyc through 3.4.1 was found to contain a NULL pointer dereference in src/vm.c in op_super() / OP_SUPER due to a missing runtime guard for top-level super.
Impact
mrubyc through 3.4.1 was found to contain a NULL pointer dereference in src/vm.c in op_super() / OP_SUPER due to a missing runtime guard for top-level super.
Affected products
| Product | Affected versions |
|---|---|
| Mrubyc | through 3.4.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.