CVE-2026-8258
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
In the Squirrel library up to version 3.2, a stack-based buffer overflow vulnerability exists in the validate_format function in sqstdlib/sqstdstring.cpp. The attack can only be executed locally. The exploit has been published and may be used. The project was informed but has not responded.
Risk Assessment
The organization may be at risk of local buffer overflow, potentially leading to crashes or code execution.
Recommendation
It is recommended to avoid using Squirrel library versions up to 3.2 or apply available patches if any.
Original NVD description (English source)
A flaw has been found in Squirrel up to 3.2. Impacted is the function validate_format in the library sqstdlib/sqstdstring.cpp. Executing a manipulation can lead to stack-based buffer overflow. The attack can only be executed locally. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.