A security flaw has been discovered in Squirrel up to 3.2.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. May 26, 2026 · NIST NVD

   Detected

   A security flaw has been discovered in Squirrel up to 3.2. Impacted is the function ReadObject of the file squirrel/sqobject.cpp of the component Cnut File Handler. Performing a manipulation results in heap-based buffer overflow. The attack is only possible with local access. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early thro

2. Jul 23, 2026 · NIST NVD

   Updated

   A security flaw has been discovered in Squirrel up to 3.2. Impacted is the function ReadObject of the file squirrel/sqobject.cpp of the component Cnut File Handler. Performing a manipulation results in heap-based buffer overflow. The attack is only possible with local access. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early thro

Affected

• cpe squirrel-lang/squirrelversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-9541

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-9541

  A security flaw has been discovered in Squirrel up to 3.2. Impacted is the function ReadObject of the file squirrel/sqobject.cpp of the component Cnut File Handler. Performing a manipulation results in heap-based buffer overflow. The attack is only possible with local access. The

  nvd.nist.gov

References

• Exploit · github.com
• Exploit · github.com
• Exploit · vuldb.com
• Third Party Advisory · vuldb.com
• Permissions Required · vuldb.com