CVE-2022-0623: 
NixOS vulnerability analysis and mitigation

Out-of-bounds Read vulnerability was discovered in Homebrew mruby versions prior to 3.2. The vulnerability was assigned CVE-2022-0623 and was disclosed on February 16, 2022. This security flaw affects the mruby programming language implementation (NVD, CVE).

The vulnerability is classified as an Out-of-bounds Read (CWE-125) issue. The CVSS v3.1 base score was rated as 9.1 CRITICAL by NVD with vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H, while huntr.dev assessed it as 6.5 MEDIUM with vector string CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L. The issue occurred because the code did not properly check the type before hash access in the vm.c file (GitHub Patch).

The vulnerability could potentially lead to unauthorized access to memory locations outside of the intended boundary, which could result in information disclosure and system crashes. The high CVSS score indicates significant potential impact on the confidentiality and availability of affected systems (NVD).

The vulnerability was fixed in mruby version 3.2. Users are advised to upgrade to this version or later. The fix involved implementing proper type checking before hash access in the vm.c file (GitHub Patch).