CVE-2026-24821

A heap-based buffer over-read that might affect a system that compiles untrusted Lua code in turanszkij/WickedEngine. PUBLISHED

Description (CNA)

Out-of-bounds Read vulnerability in turanszkij WickedEngine (WickedEngine/LUA modules). This vulnerability is associated with program files lparser.C. This issue affects WickedEngine: through 0.71.727.

Affected (CNA)

Vendor / product	Versions
turanszkij / WickedEngine	affected 0 through 0.71.727

CWE

CWE-125

References

https://github.com/turanszkij/WickedEngine/pull/1095

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.