This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2026-2655 | BDVDB-2026-315907 Detail

ChaiScript

Description#

A vulnerability was detected in ChaiScript up to 6.1.0. The impacted element is the function chaiscript::str_less::operator of the file include/chaiscript/chaiscript_defines.hpp. The manipulation results in use after free. The attack requires a local approach. The attack requires a high level of complexity. The exploitability is regarded as difficult. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Impact#

Per CVSS v3.1: confidentiality impact none, integrity impact none, availability impact low. Attack vector: local.

Weaknesses#

  • CWE-416 Use After Free
  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References#

Exploit#

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.