CVE-2026-3387 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability has been found in wren-lang wren up to 0.4.0. Affected by this issue is the function getByteCountForArguments of the file src/vm/wren_compiler.c…
Medium CVSS: 4.8

CVE-2026-3387

A vulnerability has been found in wren-lang wren up to 0.4.0. Affected by this issue is the function getByteCountForArguments of the file src/vm/wren_compiler.c. Such manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Vendor
Wren
Product
Wren
CWE
CWE-404
Yayın Tarihi
2026-03-01 10:16:00
Güncelleme
2026-03-05 01:50:58
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-404 Wren MEDIUM Wren 2026

Referanslar

https://github.com/oneafter/0122/blob/main/i1220/repro https://github.com/wren-lang/wren/ https://github.com/wren-lang/wren/issues/1220 https://vuldb.com/?ctiid.348273 https://vuldb.com/?id.348273 https://vuldb.com/?submit.761312