CVE-2026-3388: Squirrel sqcompiler.cpp UnaryOP recursion
A vulnerability was found in Squirrel up to 3.2. This affects the function SQCompiler::Factor/SQCompiler::UnaryOP of the file squirrel/sqcompiler.cpp. Performing a manipulation results in uncontrolled recursion. The attack needs to be approached locally. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3388?
CVE-2026-3388 is classified as a high severity vulnerability due to the potential for uncontrolled recursion leading to denial of service.
How do I fix CVE-2026-3388?
To mitigate CVE-2026-3388, you should upgrade Squirrel to a version later than 3.2 that addresses this vulnerability.
What software is affected by CVE-2026-3388?
CVE-2026-3388 affects all versions of Squirrel up to 3.2.
What kind of attack can be executed through CVE-2026-3388?
An attacker can exploit CVE-2026-3388 through local manipulation to induce uncontrolled recursion.
Is CVE-2026-3388 remotely exploitable?
CVE-2026-3388 requires local access for exploitation, making it less dangerous in terms of remote attacks.