Heap-based Buffer Overflow in SQUIRREL 3.2 by Squirrel
CVE-2022-30292
10CRITICAL
Key Information:
- Vendor
Squirrel-lang
- Status
- Vendor
- CVE Published:
- 4 May 2022
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2022-30292?
A heap-based buffer overflow vulnerability has been identified in SQUIRREL 3.2, which arises from the absence of an important stack reservation call within the sqbaselib.cpp file. This flaw can be exploited to cause arbitrary code execution or application crashes, posing significant security risks to users of the affected product.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.