wren-lang vulnerabilities

Products

• wren 5

Latest wren-lang CVEs

Newest publication first

1. CVE-2026-3387 wren-lang wren wren_compiler.c getByteCountForArguments null pointer dereference

   Published 2026-03-01

   Medium·CVSS 4.8 EPSS 0.19%

   A vulnerability has been found in wren-lang wren up to 0.4.0. Affected by this issue is the function getByteCountForArguments of the file src/vm/wren_compiler.c. Such manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has...

2. CVE-2026-3386 wren-lang wren wren_compiler.c emitOp out-of-bounds

   Published 2026-03-01

   Medium·CVSS 4.8 EPSS 0.19%

   A flaw has been found in wren-lang wren up to 0.4.0. Affected by this vulnerability is the function emitOp of the file src/vm/wren_compiler.c. This manipulation causes out-of-bounds read. It is possible to launch the attack on the local host. The exploit has been published and ma...

3. CVE-2026-3385 wren-lang wren wren_compiler.c resolveLocal recursion

   Published 2026-03-01

   Medium·CVSS 4.8 EPSS 0.19%

   A vulnerability was detected in wren-lang wren up to 0.4.0. Affected is the function resolveLocal of the file src/vm/wren_compiler.c. The manipulation results in uncontrolled recursion. Attacking locally is a requirement. The exploit is now public and may be used. The project was...

4. CVE-2026-2858 wren-lang wren Source File wren_compiler.c peekChar out-of-bounds

   Published 2026-02-20

   Medium·CVSS 4.8 EPSS 0.14%

   A vulnerability was identified in wren-lang wren up to 0.4.0. This affects the function peekChar of the file src/vm/wren_compiler.c of the component Source File Parser. Such manipulation leads to out-of-bounds read. The attack needs to be performed locally. The exploit is publicl...

5. CVE-2026-2657 wren-lang wren Error Message wren_compiler.c printError stack-based overflow

   Published 2026-02-18

   Medium·CVSS 4.8 EPSS 0.28%

   A vulnerability has been found in wren-lang wren up to 0.4.0. This impacts the function printError of the file src/vm/wren_compiler.c of the component Error Message Handler. Such manipulation leads to stack-based buffer overflow. An attack has to be approached locally. The exploi...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.