CVE-2026-24821

Critical

Published: 27/01/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

Out-of-bounds read in WickedEngine up to 0.71.727 in lparser.C (LUA). May lead to data disclosure or crash.

Risk Assessment

Risk of information leak or application crash when processing malicious LUA scripts.

Recommendation

Update WickedEngine to a newer version or restrict trust in LUA scripts.

Original NVD description (English source)

Out-of-bounds Read vulnerability in turanszkij WickedEngine (WickedEngine/LUA modules). This vulnerability is associated with program files lparser.C. This issue affects WickedEngine: through 0.71.727.