mtr through 0.95, in certain privileged contexts, mishandles execution of a program specified by the MTR_PACKET environment variable. NOTE: mtr on macOS may often have Sudo rules, as an indirect consequence of Homebrew not installing setuid binaries.

os/linux/elf.rb in Homebrew brew before 4.2.20 uses ldd to load ELF files obtained from untrusted sources, which allows attackers to achieve code execution via an ELF file with a custom .interp section. NOTE: this code execution would occur during an un-sandboxed binary relocation phase, which occurs before a user would expect execution of downloaded package content. (237d1e783f7ee261beaba7d3f6bde22da7148b0a was the tested vulnerable version.)

GoReleaser builds Go binaries for several platforms, creates a GitHub release and then pushes a Homebrew formula to a tap repository. `goreleaser release --debug` log shows secret values used in the in the custom publisher. This vulnerability is fixed in 1.24.0.

goreleaser

NULL Pointer Dereference in Homebrew mruby prior to 3.2.

mruby

Out-of-bounds Read in Homebrew mruby prior to 3.2.

mruby

Heap-based Buffer Overflow in Homebrew mruby prior to 3.2.

mruby

Out-of-bounds Read in Homebrew mruby prior to 3.2.

mruby

Use of Out-of-range Pointer Offset in Homebrew mruby prior to 3.2.

mruby

Heap-based Buffer Overflow in Homebrew mruby prior to 3.2.

mruby

Out-of-bounds Read in Homebrew mruby prior to 3.2.

mruby

NULL Pointer Dereference in Homebrew mruby prior to 3.2.

mruby

NULL Pointer Dereference in Homebrew mruby prior to 3.2.

mruby