CVE-2026-3382
- Source
- https://cve.org/CVERecord?id=CVE-2026-3382
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-3382.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-3382
- Published
- 2026-03-01T05:32:12.992Z
- Modified
- 2026-07-15T01:49:17.501676014Z
- Severity
-
- 1.9 (Low) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
- Summary
- ChaiScript boxed_number.hpp get_as memory corruption
- Details
-
A security flaw has been discovered in ChaiScript up to 6.1.0. The impacted element is the function chaiscript::BoxedNumber::getas of the file include/chaiscript/dispatchkit/boxed_number.hpp. Performing a manipulation results in memory corruption. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
- Database specific
{ "cwe_ids": [ "CWE-119" ], "cna_assigner": "VulDB", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/3xxx/CVE-2026-3382.json" }- References
-
- https://github.com/ChaiScript/ChaiScript/
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/3xxx/CVE-2026-3382.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-3382
- https://vuldb.com/?id.348268
- https://vuldb.com/?submit.761301
- https://github.com/ChaiScript/ChaiScript/issues/635
- https://github.com/ChaiScript/ChaiScript/issues/635#issue-3828258513
- https://vuldb.com/?ctiid.348268
Affected packages
Git / github.com/chaiscript/chaiscript
Affected ranges
- Type
- GIT
- Repo
- https://github.com/chaiscript/chaiscript
- Events
-
IntroducedLast affected
- Database specific
{ "source": [ "AFFECTED_FIELD", "CPE_RANGE" ], "cpe": "cpe:2.3:a:chaiscript:chaiscript:*:*:*:*:*:*:*:*", "extracted_events": [ { "introduced": "6.0" }, { "last_affected": "6.0" }, { "introduced": "6.1.0" }, { "last_affected": "6.1.0" }, { "introduced": "0" } ] }