Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2026-24821

A heap-based buffer over-read that might affect a system that compiles untrusted Lua code in turanszkij/WickedEngine.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GovTech CSG

Description

Out-of-bounds Read vulnerability in turanszkij WickedEngine (WickedEngine/LUA modules). This vulnerability is associated with program files lparser.C. This issue affects WickedEngine: through 0.71.727.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

turanszkij WickedEngine

Default version status: affected

  • 0 to ≤ 0.71.727affected

References