Medium
squirrel3 — security advisory
A vulnerability was determined in Squirrel up to 3.2. This affects the function SQFunctionProto::Load of the file squirrel/sqobject.cpp. This manipulation causes heap-based buffer overflow. The attack is restricted to local execution. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
- Products
- squirrel3
- Affected versions
- 3.1-4, 3.1-5, 3.1-8, 3.1-8.2, 3.1-8.3, 3.1-8.4, 3.1-8.5, 3.1-8build1
- Fixed versions
- Not specified
- CVEs
- CVE-2026-8261
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 03:21 UTC · Revision 1
Source evidence
A vulnerability was determined in Squirrel up to 3.2. This affects the function SQFunctionProto::Load of the file squirrel/sqobject.cpp. This manipulation causes heap-based buffer overflow. The attack is restricted to local execution. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
osv:UBUNTU-CVE-2026-8261
squirrel3
Fixed versions: Not specified
squirrel3
Fixed versions: Not specified
squirrel3
Fixed versions: Not specified
squirrel3
Fixed versions: Not specified
squirrel3
Fixed versions: Not specified
squirrel3
Fixed versions: Not specified
Complete source record
{
"id": "9af5701c9798fcddb131b91283d288e48c50a9b43a8316be082cc25e6e03b1b1",
"url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-8261",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "UBUNTU-CVE-2026-8261",
"summary": "A vulnerability was determined in Squirrel up to 3.2. This affects the function SQFunctionProto::Load of the file squirrel/sqobject.cpp. This manipulation causes heap-based buffer overflow. The attack is restricted to local execution. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.",
"evidence": "osv:UBUNTU-CVE-2026-8261",
"products": [
{
"name": {
"value": "squirrel3",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "3.1-4",
"evidence": "/affected/0/versions"
},
{
"value": "3.1-5",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "squirrel3",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "3.1-8",
"evidence": "/affected/1/versions"
},
{
"value": "3.1-8build1",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "squirrel3",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "3.1-8build1",
"evidence": "/affected/2/versions"
}
]
},
{
"name": {
"value": "squirrel3",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "3.1-8.2",
"evidence": "/affected/3/versions"
}
]
},
{
"name": {
"value": "squirrel3",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "3.1-8.3",
"evidence": "/affected/4/versions"
},
{
"value": "3.1-8.4",
"evidence": "/affected/4/versions"
},
{
"value": "3.1-8.5",
"evidence": "/affected/4/versions"
}
]
},
{
"name": {
"value": "squirrel3",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "3.1-8.2",
"evidence": "/affected/5/versions"
},
{
"value": "3.1-8.3",
"evidence": "/affected/5/versions"
}
]
}
],
"severity": "medium",
"structured": {
"id": "UBUNTU-CVE-2026-8261",
"aliases": [
"UBUNTU-CVE-2026-8261"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "squirrel3",
"purl": "pkg:deb/ubuntu/squirrel3?arch=source&distro=bionic",
"ecosystem": "Ubuntu:18.04:LTS"
},
"versions": [
"3.1-4",
"3.1-5"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-8261.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libsquirrel3-0",
"binary_version": "3.1-5"
},
{
"binary_name": "squirrel3",
"binary_version": "3.1-5"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "squirrel3",
"purl": "pkg:deb/ubuntu/squirrel3?arch=source&distro=focal",
"ecosystem": "Ubuntu:20.04:LTS"
},
"versions": [
"3.1-8",
"3.1-8build1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-8261.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libsquirrel3-0",
"binary_version": "3.1-8build1"
},
{
"binary_name": "squirrel3",
"binary_version": "3.1-8build1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "squirrel3",
"purl": "pkg:deb/ubuntu/squirrel3?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"3.1-8build1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-8261.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libsquirrel3-0",
"binary_version": "3.1-8build1"
},
{
"binary_name": "squirrel3",
"binary_version": "3.1-8build1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "squirrel3",
"purl": "pkg:deb/ubuntu/squirrel3?arch=source&distro=questing",
"ecosystem": "Ubuntu:25.10"
},
"versions": [
"3.1-8.2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-8261.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libsquirrel3-0",
"binary_version": "3.1-8.2"
},
{
"binary_name": "squirrel3",
"binary_version": "3.1-8.2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "squirrel3",
"purl": "pkg:deb/ubuntu/squirrel3?arch=source&distro=stonking",
"ecosystem": "Ubuntu:26.10"
},
"versions": [
"3.1-8.3",
"3.1-8.4",
"3.1-8.5"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-8261.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libsquirrel3-0",
"binary_version": "3.1-8.5"
},
{
"binary_name": "squirrel3",
"binary_version": "3.1-8.5"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "squirrel3",
"purl": "pkg:deb/ubuntu/squirrel3?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"3.1-8.2",
"3.1-8.3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-8261.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libsquirrel3-0",
"binary_version": "3.1-8.3"
},
{
"binary_name": "squirrel3",
"binary_version": "3.1-8.3"
}
]
}
}
],
"modified": "2026-10-17T13:01:11.649253471Z",
"provider": "osv",
"upstream": [
"CVE-2026-8261"
],
"references": [
"https://ubuntu.com/security/CVE-2026-8261",
"https://www.cve.org/CVERecord?id=CVE-2026-8261",
"https://github.com/albertodemichelis/squirrel/issues/326"
]
},
"related_cves": [
{
"value": "CVE-2026-8261",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 361196,
"published_at": "2026-05-11T02:16:00+00:00"
}