CVE-2025-13120 | mruby up to 3.4.0 src/array.c sort_cmp use after free (Issue 6649)

November 13, 2025 Yanac

A vulnerability was found in mruby up to 3.4.0. It has been declared as critical. This vulnerability affects the function sort_cmp of the file src/array.c. Such manipulation leads to use after free.

This vulnerability is traded as CVE-2025-13120. An attack has to be approached locally. Furthermore, there is an exploit available.

It is advisable to implement a patch to correct this issue.VulDB Recent EntriesRead More