CVE-2026-9541
published 2026-05-26CVE-2026-9541: A security flaw has been discovered in Squirrel up to 3.2. Impacted is the function ReadObject of the file squirrel/sqobject.cpp of the component Cnut File…
PriorityP430medium5.3CVSS 3.1
AVLACLPRLUINSUCLILAL
EPSS
0.17%
6.6th percentile
A security flaw has been discovered in Squirrel up to 3.2. Impacted is the function ReadObject of the file squirrel/sqobject.cpp of the component Cnut File Handler. Performing a manipulation results in heap-based buffer overflow. The attack is only possible with local access. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| squirrel-lang | squirrel | <= 3.2 | — |
| squirrel-lang | squirrel | — | — |
| squirrel-lang | squirrel | — | — |
| squirrel-lang | squirrel | — | — |
CVSS provenance
nvdv3.15.3MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
nvdv4.01.9LOWCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
nvdv2.04.3MEDIUMAV:L/AC:L/Au:S/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-9541 codeblocks: Squirrel: Heap-based buffer overflow in Cnut File Handler via ReadObject function [epel-all]
bugzilla·2026-05-26·CVSS 1.9
CVE-2026-9541 [LOW] CVE-2026-9541 codeblocks: Squirrel: Heap-based buffer overflow in Cnut File Handler via ReadObject function [epel-all]
CVE-2026-9541 codeblocks: Squirrel: Heap-based buffer overflow in Cnut File Handler via ReadObject function [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-9541 squirrel: Squirrel: Heap-based buffer overflow in Cnut File Handler via ReadObject function
bugzilla·2026-05-26·CVSS 1.9
CVE-2026-9541 [LOW] CVE-2026-9541 squirrel: Squirrel: Heap-based buffer overflow in Cnut File Handler via ReadObject function
CVE-2026-9541 squirrel: Squirrel: Heap-based buffer overflow in Cnut File Handler via ReadObject function
A security flaw has been discovered in Squirrel up to 3.2. Impacted is the function ReadObject of the file squirrel/sqobject.cpp of the component Cnut File Handler. Performing a manipulation results in heap-based buffer overflow. The attack is only possible with local access. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Bugzilla
CVE-2026-9541 supertux: Squirrel: Heap-based buffer overflow in Cnut File Handler via ReadObject function [fedora-all]
bugzilla·2026-05-26·CVSS 1.9
CVE-2026-9541 [LOW] CVE-2026-9541 supertux: Squirrel: Heap-based buffer overflow in Cnut File Handler via ReadObject function [fedora-all]
CVE-2026-9541 supertux: Squirrel: Heap-based buffer overflow in Cnut File Handler via ReadObject function [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-9541 openttd: Squirrel: Heap-based buffer overflow in Cnut File Handler via ReadObject function [fedora-all]
bugzilla·2026-05-26·CVSS 1.9
CVE-2026-9541 [LOW] CVE-2026-9541 openttd: Squirrel: Heap-based buffer overflow in Cnut File Handler via ReadObject function [fedora-all]
CVE-2026-9541 openttd: Squirrel: Heap-based buffer overflow in Cnut File Handler via ReadObject function [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-9541 codeblocks: Squirrel: Heap-based buffer overflow in Cnut File Handler via ReadObject function [fedora-all]
bugzilla·2026-05-26·CVSS 1.9
CVE-2026-9541 [LOW] CVE-2026-9541 codeblocks: Squirrel: Heap-based buffer overflow in Cnut File Handler via ReadObject function [fedora-all]
CVE-2026-9541 codeblocks: Squirrel: Heap-based buffer overflow in Cnut File Handler via ReadObject function [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
2026-05-26
Published