Squirrel vulnerabilities

A heap-based buffer overflow vulnerability exists in Squirrel up to version 3.2 in the ReadObject function of squirrel/sqobject.cpp (Cnut File Handler component). Local access is required and the exploit has been made public.

A heap-based buffer overflow vulnerability was found in Squirrel up to version 3.2 in the SQFunctionProto::Load function in squirrel/sqobject.cpp. The attack requires local access and is publicly disclosed, but the project has not responded.

In the Squirrel library up to version 3.2, a stack-based buffer overflow vulnerability exists in the validate_format function in sqstdlib/sqstdstring.cpp. The attack can only be executed locally. The exploit has been published and may be used. The project was informed but has not responded.