CVE-2026-38973

Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days.

mrubyc through release3.4.1 was found to contain an out-of-bounds read in builtin missing-method lookup inside mrbc_find_method().

Published 2026-07-06. Last modified 2026-07-09.