CVE-2022-0623

Out-of-bounds Read in Homebrew mruby prior to 3.2.

• CWE-125

• https://github.com/mruby/mruby/commit/ff3a5ebed6ffbe3e70481531cfb969b497aa73adPatch, Third Party Advisory
• https://huntr.dev/bounties/5b908ac7-d8f1-4fcd-9355-85df565f7580Exploit, Patch, Third Party Advisory
• https://github.com/mruby/mruby/commit/ff3a5ebed6ffbe3e70481531cfb969b497aa73adPatch, Third Party Advisory
• https://huntr.dev/bounties/5b908ac7-d8f1-4fcd-9355-85df565f7580Exploit, Patch, Third Party Advisory

Published

Feb 17, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-0617A flaw null pointer dereference in the Linux kernel UDF file…5.5
• CVE-2022-0618A program using swift-nio-http2 is vulnerable to a denial of…7.5
• CVE-2022-0619The Database Peek WordPress plugin through 1.2 does not sani…6.1
• CVE-2022-0620The Delete Old Orders WordPress plugin through 0.2 does not …6.1
• CVE-2022-0621The dTabs WordPress plugin through 1.4 does not sanitize and…6.1
• CVE-2022-0622Generation of Error Message Containing Sensitive Information…5.3
• CVE-2022-0624Authorization Bypass Through User-Controlled Key in GitHub r…7.3
• CVE-2022-0625The Admin Menu Editor WordPress plugin through 1.0.4 does no…6.1
• CVE-2022-0626The Advanced Admin Search WordPress plugin before 1.1.6 does…6.1
• CVE-2022-0627The Amelia WordPress plugin before 1.0.47 does not sanitize …6.1
• CVE-2022-0628The Mega Menu WordPress plugin before 3.0.8 does not sanitiz…6.1
• CVE-2022-0629Stack-based Buffer Overflow in GitHub repository vim/vim pri…7.8