CVE-2026-3389: Squirrel sqstdrex.cpp sqstd_rex_newnode null pointer dereference
A vulnerability was determined in Squirrel up to 3.2. This vulnerability affects the function sqstdrexnewnode in the library sqstdlib/sqstdrex.cpp. Executing a manipulation can lead to null pointer dereference. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3389?
CVE-2026-3389 is classified as a high severity vulnerability due to the potential for exploitation via null pointer dereference.
How do I fix CVE-2026-3389?
To address CVE-2026-3389, update Squirrel to version 3.2 or later where the vulnerability is patched.
What versions of Squirrel are affected by CVE-2026-3389?
CVE-2026-3389 affects all versions of Squirrel up to and including version 3.2.
What type of vulnerability is CVE-2026-3389?
CVE-2026-3389 is a null pointer dereference vulnerability that can be exploited under certain conditions.
Can CVE-2026-3389 lead to system compromise?
Yes, CVE-2026-3389 can potentially lead to system crashes or unexpected behavior, impacting application stability.