CVE-2022-4996
Received Received - Intake

Floating Point Comparison Flaw in mruby

Publication date: 2026-08-20

Last updated on: 2026-08-20

Assigner: VulDB

Description
A flaw has been found in mruby 3.1.0. Affected is the function udiv of the file bigint.c. Executing a manipulation can lead to floating point comparison with incorrect operator. It is possible to launch the attack remotely. The exploit has been published and may be used. It is best practice to apply a patch to resolve this issue.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-20
Last Modified
2026-08-20
Generated
2026-08-20
AI Q&A
2026-08-20
EPSS Evaluated
N/A
NVD
CVE-2022-4996
EUVD
EUVD-2022-56020

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
mruby mruby 3.1.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-1077 The code performs a comparison such as an equality test between two float (floating point) values, but it uses comparison operators that do not account for the possibility of loss of precision.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in mruby 3.1.0, specifically in the udiv function of the bigint.c file. It involves a floating point comparison using an incorrect operator, which could lead to unexpected behavior. The flaw can be exploited remotely, and a public exploit exists, increasing the risk of attack.

Impact Analysis

The vulnerability may allow attackers to remotely execute manipulations that could disrupt normal operations or cause incorrect calculations. Since the exploit is public, unpatched systems are at higher risk of compromise. Immediate patching is recommended to mitigate potential impacts.

Mitigation Strategies

Apply a patch to resolve the issue in mruby 3.1.0. Since the flaw is in the udiv function of bigint.c, updating to a patched version of mruby is recommended. Monitor for any suspicious activity as the exploit has been published.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2022-4996. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart