CVE-2026-8258
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
In the Squirrel library up to version 3.2, a stack-based buffer overflow vulnerability exists in the validate_format function in sqstdlib/sqstdstring.cpp. The attack can only be executed locally. The exploit has been published and may be used. The project was informed but has not responded.
Risk Assessment
The organization may be at risk of local buffer overflow, potentially leading to crashes or code execution.
Recommendation
It is recommended to avoid using Squirrel library versions up to 3.2 or apply available patches if any.
Other vulnerabilities in Squirrel
See all- CVE-2026-9541Medium
A heap-based buffer overflow vulnerability exists in Squirrel up to version 3.2 in the ReadObject function of squirrel/sqobject.cpp (Cnut File Handler component). Local access is required and the exploit has been made public.
- CVE-2026-8261Medium
A heap-based buffer overflow vulnerability was found in Squirrel up to version 3.2 in the SQFunctionProto::Load function in squirrel/sqobject.cpp. The attack requires local access and is publicly disclosed, but the project has not responded.
Original NVD description (English source)
A flaw has been found in Squirrel up to 3.2. Impacted is the function validate_format in the library sqstdlib/sqstdstring.cpp. Executing a manipulation can lead to stack-based buffer overflow. The attack can only be executed locally. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS