CVE-2026-3389
published 2026-03-01CVE-2026-3389: A vulnerability was determined in Squirrel up to 3.2. This vulnerability affects the function sqstd_rex_newnode in the library sqstdlib/sqstdrex.cpp. Executing…
PriorityP423medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.17%
6.6th percentile
A vulnerability was determined in Squirrel up to 3.2. This vulnerability affects the function sqstd_rex_newnode in the library sqstdlib/sqstdrex.cpp. Executing a manipulation can lead to null pointer dereference. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | squirrel3 | — | — |
| squirrel-lang | squirrel | <= 3.2 | — |
| squirrel-lang | squirrel | — | — |
| squirrel-lang | squirrel | — | — |
| squirrel-lang | squirrel | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvdv4.01.9LOWCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
nvdv2.01.7LOWAV:L/AC:L/Au:S/C:N/I:N/A:P
osv4.8MEDIUM
vendor_redhat7.5HIGH
vendor_debian4.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2026-3389: A vulnerability was determined in Squirrel up to 3
osv·2026-03-01·CVSS 4.8
CVE-2026-3389 [MEDIUM] CVE-2026-3389: A vulnerability was determined in Squirrel up to 3
A vulnerability was determined in Squirrel up to 3.2. This vulnerability affects the function sqstd_rex_newnode in the library sqstdlib/sqstdrex.cpp. Executing a manipulation can lead to null pointer dereference. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
GHSA
GHSA-g9mq-qjc2-8pgx: A vulnerability was determined in Squirrel up to 3
ghsa_unreviewed·2026-03-01
CVE-2026-3389 [MEDIUM] CWE-404 GHSA-g9mq-qjc2-8pgx: A vulnerability was determined in Squirrel up to 3
A vulnerability was determined in Squirrel up to 3.2. This vulnerability affects the function sqstd_rex_newnode in the library sqstdlib/sqstdrex.cpp. Executing a manipulation can lead to null pointer dereference. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
Red Hat
FreeRDP: FreeRDP: Information Disclosure via RDPGFX ResetGraphics PDU
vendor_redhat·2026-09-15·CVSS 6.5
CVE-2026-91946 [MEDIUM] CWE-824 FreeRDP: FreeRDP: Information Disclosure via RDPGFX ResetGraphics PDU
FreeRDP: FreeRDP: Information Disclosure via RDPGFX ResetGraphics PDU
A flaw was found in FreeRDP. This information disclosure vulnerability exists in the RDPGFX server's ResetGraphics Protocol Data Unit (PDU) serializer. It fails to properly initialize padding bytes, allowing a remote attacker to receive uninitialized heap memory. This can lead to the disclosure of sensitive data, including live pointers and GLib function addresses, which could defeat Address Space Layout Randomization (ASLR) and reveal the GLib module's base address.
Mitigation: To mitigate this issue, restrict network access to FreeRDP server instances to only trusted clients and networks. Configure firewall rules to limit inbound connections to the RDP port (typically 3389) from untrusted sources. If FreeRDP server f
Red Hat
FreeRDP: FreeRDP: Denial of Service via crafted desktop dimensions
vendor_redhat·2026-09-15·CVSS 7.5
CVE-2026-91955 [HIGH] CWE-369 FreeRDP: FreeRDP: Denial of Service via crafted desktop dimensions
FreeRDP: FreeRDP: Denial of Service via crafted desktop dimensions
A flaw was found in FreeRDP. FreeRDP contains a flaw where it fails to validate client-supplied desktop dimensions during the Graphics Command Channel (GCC) negotiation. A remote attacker can exploit this by sending crafted Remote Desktop Protocol (RDP) packets with zero or oversized dimensions. This can lead to division-by-zero or assertion failures, causing the server process to terminate and resulting in a denial of service.
Mitigation: To reduce exposure, restrict network access to the FreeRDP server to trusted clients only. Configure firewall rules to limit incoming connections to the RDP port (typically 3389) from known and authorized IP addresses or subnets. If the FreeRDP server is not essential, consider disablin
Debian
CVE-2026-3389: squirrel3 - A vulnerability was determined in Squirrel up to 3.2. This vulnerability affects...
vendor_debian·2026·CVSS 4.8
CVE-2026-3389 [MEDIUM] CVE-2026-3389: squirrel3 - A vulnerability was determined in Squirrel up to 3.2. This vulnerability affects...
A vulnerability was determined in Squirrel up to 3.2. This vulnerability affects the function sqstd_rex_newnode in the library sqstdlib/sqstdrex.cpp. Executing a manipulation can lead to null pointer dereference. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
Scope: local
bullseye: open
forky: open
sid: open
trixie: open
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-3389 supertux: Squirrel: Denial of Service via null pointer dereference [fedora-all]
bugzilla·2026-03-02·CVSS 5.5
CVE-2026-3389 [MEDIUM] CVE-2026-3389 supertux: Squirrel: Denial of Service via null pointer dereference [fedora-all]
CVE-2026-3389 supertux: Squirrel: Denial of Service via null pointer dereference [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Discussion:
This bug appears to have been reported against 'rawhide' during the Fedora Linux 45 development cycle.
Changing version to 45.
Bugzilla
CVE-2026-3389 squirrel: Squirrel: Denial of Service via null pointer dereference [fedora-all]
bugzilla·2026-03-02·CVSS 5.5
CVE-2026-3389 [MEDIUM] CVE-2026-3389 squirrel: Squirrel: Denial of Service via null pointer dereference [fedora-all]
CVE-2026-3389 squirrel: Squirrel: Denial of Service via null pointer dereference [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Discussion:
This bug appears to have been reported against 'rawhide' during the Fedora Linux 45 development cycle.
Changing version to 45.
Bugzilla
CVE-2026-3389 codeblocks: Squirrel: Denial of Service via null pointer dereference [fedora-all]
bugzilla·2026-03-02·CVSS 5.5
CVE-2026-3389 [MEDIUM] CVE-2026-3389 codeblocks: Squirrel: Denial of Service via null pointer dereference [fedora-all]
CVE-2026-3389 codeblocks: Squirrel: Denial of Service via null pointer dereference [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Discussion:
This bug appears to have been reported against 'rawhide' during the Fedora Linux 45 development cycle.
Changing version to 45.
Wiz
CVE-2026-3389 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 4.8
CVE-2026-3389 [MEDIUM] CVE-2026-3389 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-3389 :
Homebrew vulnerability analysis and mitigation
A vulnerability was determined in Squirrel up to 3.2. This vulnerability affects the function sqstd_rex_newnode in the library sqstdlib/sqstdrex.cpp. Executing a manipulation can lead to null pointer dereference. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
Source : NVD
## 4.8
Score
Published March 1, 2026
Severity MEDIUM
CNA Score 4.8
Affected Technologies
Homebrew
Linux Debian
Has Public Exploit Yes
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 7.4
Exploitation Probability (EPSS) N/A
2026-03-01
Published