This vulnerability in Squirrel versions 3.0 through 3.2 involves a heap-based buffer overflow in the SQFunctionProto::Load function within squirrel/sqobject.cpp. The flaw allows an attacker with local access to manipulate memory, potentially leading to instability or code execution. The vulnerability was responsibly disclosed to the project, but no response or fix has been provided yet. The CVSS 4.0 vector indicates local attack vector, low complexity, no privileges required, no user interaction, and limited confidentiality, integrity, and availability impact.

The heap-based buffer overflow can lead to memory corruption when exploited locally, potentially causing application crashes or other unintended behavior. The impact is limited by the requirement for local access and the absence of privileges or user interaction. There is no evidence of exploitation in the wild. Without a patch, affected systems remain vulnerable to local attacks that could compromise stability or security of the Squirrel environment.

As of the current information, no official patch or remediation is available. Users should monitor the Squirrel project for updates or advisories. Until a fix is released, restricting local access to trusted users and environments is recommended to reduce risk. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.