CVE-2026-3388CWE-404CWE-674

Squirrel sqcompiler.cpp UnaryOP recursion

Medium · published March 1, 2026

CVSS v4.0
4.8
EPSS
0%
Percentile
9.1
In the wild
Unconfirmed
What it is

A vulnerability was found in Squirrel up to 3.2. This affects the function SQCompiler::Factor/SQCompiler::UnaryOP of the file squirrel/sqcompiler.cpp. Performing a manipulation results in uncontrolled recursion. The attack needs to be approached locally. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

The record
Technical detail
CVSS v4.0
4.8 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
EPSS
0.00198 · 9.1th percentile
Weaknesses
CWE-404 · Improper Resource Shutdown or Release; CWE-674 · Uncontrolled Recursion
Published
2026-03-01T09:32Z
EPSS history
Timeline
  • 01 MAR 09:32Z
    Squirrel sqcompiler.cpp UnaryOP recursion
    cvelistv5