Out-of-Bounds Read in Squirrel Interpreter by Squirrel

CVE-2021-41556

What is CVE-2021-41556?

The vulnerability identified in the Squirrel interpreter allows for out-of-bounds reads, potentially leading to code execution. If an attacker manages to lure a victim into executing a modified Squirrel script, they can break out of the script's sandbox environment, even with all high-risk functionalities disabled. This vulnerability poses a risk to cloud services utilizing Squirrel scripts for customization, and it can also be exploited in video games implementing the Squirrel engine, enabling malware distribution.

References