CVE-2026-2858: falha de média gravidade em wren-lang wren
wren-lang wren Source File wren_compiler.c peekChar out-of-bounds
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.8epss 0.1%
A vulnerability was identified in wren-lang wren up to 0.4.0. This affects the function peekChar of the file src/vm/wren_compiler.c of the component Source File Parser. Such manipulation leads to out-of-bounds read. The attack needs to be performed locally. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
wren-lang · wrenCVEs relacionadas — wren-lang wren
No mesmo produto, das mais perigosas para as menos.
CVE-2026-2657MEDIUMwren-lang wren Error Message wren_compiler.c printError stack-based overflowEPSS 0.3%CVE-2026-3386MEDIUMwren-lang wren wren_compiler.c emitOp out-of-boundsEPSS 0.2%CVE-2026-3385MEDIUMwren-lang wren wren_compiler.c resolveLocal recursionEPSS 0.2%CVE-2026-3387MEDIUMwren-lang wren wren_compiler.c getByteCountForArguments null pointer dereferenceEPSS 0.2%