PT-2026-22503 · Unknown · Chaiscript

Oneafter · Publicado 2026-03-01 · Atualizado 2026-03-05 · CVE-2026-3384

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ChaiScript versions up to 6.1.0

Description A security issue exists in ChaiScript related to uncontrolled recursion. The chaiscript::eval::AST Node Impl::eval function, located in the include/chaiscript/language/chaiscript eval.hpp file, is affected. The issue can be exploited locally. The exploit has been publicly disclosed.

Recommendations Versions prior to 6.1.0 should be updated.

Exploit

Correção

Uncontrolled Recursion

Improper Resource Release

Enumeração de Fraquezas

CWE-674

CWE-404

Identificadores relacionados

CVE-2026-3384

Produtos afetados

Chaiscript

Referências · 14

• 🔥 https://github.com/ChaiScript/ChaiScript/issues/633#issue-3828176056 · Exploit
• https://github.com/ChaiScript/ChaiScript/issues/633 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-3384 · Nota de Segurança
• https://t.me/cveNotify/154425 · Publicação no Telegram
• https://t.me/cveNotify/153663 · Publicação no Telegram
• https://vuldb.com/?submit.761303 · Nota
• https://github.com/ChaiScript/ChaiScript · Nota
• https://twitter.com/VulmonFeeds/status/2028030507389247571 · Publicação no Twitter
• https://twitter.com/infoflowcloud/status/2028025052625588675 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-3384 · Aviso do Fabricante
• https://t.me/CVEtracker/46058 · Publicação no Telegram
• https://vuldb.com/?id.348270 · Nota
• https://vuldb.com/?ctiid.348270 · Nota
• https://twitter.com/CVEnew/status/2028023854531285469 · Publicação no Twitter