Vulnerability · Published Feb 18, 2026 · Assigned by VulDB

CVE-2026-2659Squirrel sqfuncstate.cpp PopTarget out-of-bounds

Low 3.3

In plain English

A low-severity out-of-bounds read in Squirrel. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).

Severity (CVSS 3.1)3.3Low

Exploit odds (30 days)0.2%top 84.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability was determined in Squirrel up to 3.2. Affected by this vulnerability is the function SQFuncState::PopTarget of the file src/squirrel/squirrel/sqfuncstate.cpp. Executing a manipulation of the argument _target_stack can lead to out-of-bounds read. It is possible to launch the attack on the local host. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Debian:13	squirrel3	no fix listed	DEBIAN-CVE-2026-2659
Ubuntu:22.04:LTS	squirrel3	no fix listed	UBUNTU-CVE-2026-2659
Ubuntu:25.10	squirrel3	no fix listed	UBUNTU-CVE-2026-2659
Ubuntu:26.04:LTS	squirrel3	no fix listed	UBUNTU-CVE-2026-2659
Ubuntu:26.10	squirrel3	no fix listed	UBUNTU-CVE-2026-2659

Affected products (as reported)

Vendor	Product	Versions
n/a	Squirrel	3.03.13.2

Weakness: CWE-125, CWE-119 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R

References

VDB-346457 | Squirrel sqfuncstate.cpp PopTarget out-of-bounds vdb-entry, technical-description
VDB-346457 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
Submit #753163 | albertodemichelis squirrel master-branch Heap-based Buffer Overflow third-party-advisory
https://github.com/albertodemichelis/squirrel/issues/311 issue-tracking
https://github.com/oneafter/0122/blob/main/i311/repro exploit