Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2026-3385

wren-lang wren wren_compiler.c resolveLocal recursion

Description

A vulnerability was detected in wren-lang wren up to 0.4.0. Affected is the function resolveLocal of the file src/vm/wren_compiler.c. The manipulation results in uncontrolled recursion. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

wren-lang wren

  • 0.1affected
  • 0.2affected
  • 0.3affected
  • 0.4.0affected

References