A vulnerability, which was classified as problematic, was found in mruby up to 3.4.0-rc2. Affected is the function
scope_new
of the file mrbgems/mruby-compiler/core/codegen.c of the component nregs Handler. The manipulation leads to heap-based buffer overflow.
This vulnerability is traded as CVE-2025-7207. An attack has to be approached locally. Furthermore, there is an exploit available.
It is recommended to apply a patch to fix this issue.