PT-2026-39560 · Squirrel · Squirrel

Biniam · Published 2026-05-11 · Updated 2026-05-11 · CVE-2026-8261

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Squirrel versions prior to 3.3

Description A heap-based buffer overflow occurs in the SQFunctionProto::Load() function within the squirrel/sqobject.cpp file. This issue allows for local execution to manipulate memory, potentially leading to a crash or arbitrary code execution. A heap-based buffer overflow is a condition where a program writes more data to a heap-allocated memory block than it can hold, overwriting adjacent memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Heap Based Buffer Overflow

Weakness Enumeration

CWE-119

CWE-122

Related Identifiers

CVE-2026-8261

Affected Products

Squirrel

References · 7

• 🔥 https://github.com/biniamf/pocs/tree/main/squirrel-sqobject-functionproto-load-intovf-lineinfos · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-8261 · Security Note
• https://github.com/albertodemichelis/squirrel/issues/326 · Note
• https://vuldb.com/vuln/362558/cti · Note
• https://vuldb.com/submit/809904 · Note
• https://twitter.com/VulmonFeeds/status/2053672336981712963 · Twitter Post
• https://vuldb.com/vuln/362558 · Note