Findings

CVE-2026-3383

A weakness has been identified in ChaiScript up to 6.1.0.

Published Mar 1, 2026 · updated Jun 17, 2026 · chaiscript chaiscript

A weakness has been identified in ChaiScript up to 6.1.0. This affects the function chaiscript::Boxed_Number::go of the file include/chaiscript/dispatchkit/boxed_number.hpp. Executing a manipulation can lead to divide by zero. The attack requires local access. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 1, 2026 · NIST NVD

    Detected

    A weakness has been identified in ChaiScript up to 6.1.0. This affects the function chaiscript::Boxed_Number::go of the file include/chaiscript/dispatchkit/boxed_number.hpp. Executing a manipulation can lead to divide by zero. The attack requires local access. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an i

  2. Jun 17, 2026 · NIST NVD

    Updated

    A weakness has been identified in ChaiScript up to 6.1.0. This affects the function chaiscript::Boxed_Number::go of the file include/chaiscript/dispatchkit/boxed_number.hpp. Executing a manipulation can lead to divide by zero. The attack requires local access. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an i

Affected

  • cpe chaiscript/chaiscriptversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-3383

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-3383

    A weakness has been identified in ChaiScript up to 6.1.0. This affects the function chaiscript::Boxed_Number::go of the file include/chaiscript/dispatchkit/boxed_number.hpp. Executing a manipulation can lead to divide by zero. The attack requires local access. The exploit has bee

    nvd.nist.gov

References

CVE-2026-3383 · ZeroDay Findings