CVE-2026-2659: Squirrel sqfuncstate.cpp PopTarget out-of-bounds
A vulnerability was determined in Squirrel up to 3.2. Affected by this vulnerability is the function SQFuncState::PopTarget of the file src/squirrel/squirrel/sqfuncstate.cpp. Executing a manipulation of the argument targetstack can lead to out-of-bounds read. It is possible to launch the attack on the local host. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2659?
CVE-2026-2659 is considered to have a high severity due to its potential to cause out-of-bounds read vulnerabilities.
How do I fix CVE-2026-2659?
To fix CVE-2026-2659, update to the latest version of Squirrel that addresses this vulnerability.
What systems are affected by CVE-2026-2659?
CVE-2026-2659 affects Squirrel versions up to and including 3.2, specifically in the SQFuncState::PopTarget function.
What type of vulnerability is CVE-2026-2659?
CVE-2026-2659 is an out-of-bounds read vulnerability caused by manipulation of the _target_stack argument.
Can CVE-2026-2659 be exploited remotely?
Yes, CVE-2026-2659 can be exploited remotely if an attacker can manipulate the vulnerable function.