CVE-2022-0614: 
NixOS vulnerability analysis and mitigation

Use of Out-of-range Pointer Offset vulnerability was discovered in Homebrew mruby prior to version 3.2. The vulnerability was identified and assigned CVE-2022-0614, with the initial disclosure made on February 15, 2022 (CVE Details).

The vulnerability involves improper type checking before hash access in the mruby virtual machine implementation. The issue specifically relates to the operand of double splat ('**') operations that may not be a hash, where simple assertion was insufficient for proper type validation. This was addressed by replacing a basic assertion check with a more robust hash type verification (GitHub Commit).

The vulnerability could potentially lead to out-of-range pointer offset issues, which might result in memory corruption or program crashes. This affects systems running versions of Homebrew mruby prior to version 3.2 (CVE Details).

The vulnerability has been fixed in mruby version 3.2 and later. Users are advised to upgrade to the latest version. The fix involves implementing proper type checking through the mrbensurehash_type function instead of using simple assertions (GitHub Commit).