Squirrel Lang is a lightweight, dynamically typed scripting language embedded in games and interactive applications, with vulnerabilities concentrated in the language implementation itself. The vendor's disclosures reflect the parsing and runtime mechanics characteristic of embedded interpreters, and the modest volume footprint belies the breadth of downstream products that depend on the language. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Squirrel Lang over time
Signals from CVEs in this vendor scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-41556CRITICAL sqclass.cpp in Squirrel through 2.2.5 and 3.x through 3.1 allows an out-of-bounds read (in the core interpreter) that can lead to Code Execution. If a victim executes an attacker-c | Jul 28, 2022 | 10.0 | 32 | NO | NO |
CVE-2026-9541MEDIUM A security flaw has been discovered in Squirrel up to 3.2. Impacted is the function ReadObject of the file squirrel/sqobject.cpp of the component Cnut File Handler. Performing a ma | May 26, 2026 | 5.3 | 25 | NO | NO |
CVE-2022-30292CRITICAL Heap-based buffer overflow in sqbaselib.cpp in SQUIRREL 3.2 due to lack of a certain sq_reservestack call. | May 4, 2022 | 10.0 | 25 | NO | NO |
CVE-2026-2659HIGH A vulnerability was determined in Squirrel up to 3.2. Affected by this vulnerability is the function SQFuncState::PopTarget of the file src/squirrel/squirrel/sqfuncstate.cpp. Execu | Feb 18, 2026 | 7.8 | 24 | NO | NO |
CVE-2026-2661HIGH A security flaw has been discovered in Squirrel up to 3.2. This affects the function SQObjectPtr::operator in the library squirrel/sqobject.h. The manipulation results in heap-base | Feb 18, 2026 | 7.8 | 23 | NO | NO |
CVE-2026-3389MEDIUM A vulnerability was determined in Squirrel up to 3.2. This vulnerability affects the function sqstd_rex_newnode in the library sqstdlib/sqstdrex.cpp. Executing a manipulation can l | Mar 1, 2026 | 5.5 | 21 | NO | NO |
CVE-2026-3388MEDIUM A vulnerability was found in Squirrel up to 3.2. This affects the function SQCompiler::Factor/SQCompiler::UnaryOP of the file squirrel/sqcompiler.cpp. Performing a manipulation res | Mar 1, 2026 | 5.5 | 18 | NO | NO |
Signals from CVEs in this vendor scope (7 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Squirrel Lang.
Media articles that mention a CVE ID that affects a product developed by Squirrel Lang — matched by CVE ID, not by vendor name.