CVE-2026-3385 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability was detected in wren-lang wren up to 0.4.0. Affected is the function resolveLocal of the file src/vm/wren_compiler.c. The manipulation results i…
Medium CVSS: 4.8

CVE-2026-3385

A vulnerability was detected in wren-lang wren up to 0.4.0. Affected is the function resolveLocal of the file src/vm/wren_compiler.c. The manipulation results in uncontrolled recursion. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Vendor
Wren
Product
Wren
CWE
CWE-404
Yayın Tarihi
2026-03-01 09:15:57
Güncelleme
2026-03-10 14:24:15
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-404 Wren MEDIUM Wren 2026

Referanslar

https://github.com/oneafter/0122/blob/main/i1218/repro https://github.com/wren-lang/wren/ https://github.com/wren-lang/wren/issues/1218 https://vuldb.com/?ctiid.348271 https://vuldb.com/?id.348271 https://vuldb.com/?submit.761305