CVE-2026-2657: falha de média gravidade em wren-lang wren
wren-lang wren Error Message wren_compiler.c printError stack-based overflow
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.8epss 0.3%
A vulnerability has been found in wren-lang wren up to 0.4.0. This impacts the function printError of the file src/vm/wren_compiler.c of the component Error Message Handler. Such manipulation leads to stack-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
wren-lang · wrenCVEs relacionadas — wren-lang wren
No mesmo produto, das mais perigosas para as menos.
CVE-2026-3386MEDIUMwren-lang wren wren_compiler.c emitOp out-of-boundsEPSS 0.2%CVE-2026-3385MEDIUMwren-lang wren wren_compiler.c resolveLocal recursionEPSS 0.2%CVE-2026-3387MEDIUMwren-lang wren wren_compiler.c getByteCountForArguments null pointer dereferenceEPSS 0.2%CVE-2026-2858MEDIUMwren-lang wren Source File wren_compiler.c peekChar out-of-boundsEPSS 0.1%