High severity · published Feb 18, 2026
CVE-2026-2661
Squirrel sqobject.h operator heap-based overflow
7.8
CVSS
0.3%
EPSS
No
On KEV
Description
A security flaw has been discovered in Squirrel up to 3.2. This affects the function SQObjectPtr::operator in the library squirrel/sqobject.h. The manipulation results in heap-based buffer overflow. The attack needs to be approached locally. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 18% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SQ
Squirrel ·
3.0; 3.1; 3.2 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-2661
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-2661
Exploit
https://github.com/albertodemichelis/squirrel/issues/310
Exploit
https://github.com/oneafter/0122/blob/main/i310/repro
Permissions Required
https://vuldb.com/?ctiid.346459
Third Party Advisory
https://vuldb.com/?id.346459
Third Party Advisory
https://vuldb.com/?submit.753165
More from Squirrel
7.8
CVE-2026-2659
Squirrel sqfuncstate.cpp PopTarget out-of-bounds
5.9
CVE-2026-8261
Squirrel sqobject.cpp Load heap-based overflow
5.5
CVE-2026-3389
Squirrel sqstdrex.cpp sqstd_rex_newnode null pointer dereference
5.5
CVE-2026-3388
Squirrel sqcompiler.cpp UnaryOP recursion
5.3
CVE-2026-8258
Squirrel sqstdstring.cpp validate_format stack-based overflow