This vulnerability involves a heap-based buffer overflow in the ReadObject function of the Cnut File Handler component in Squirrel versions 3.0 through 3.2. An attacker with local access can manipulate input to cause memory corruption. The issue was reported early to the project but remains unpatched. The exploit code is publicly available, increasing the risk of local exploitation. No official remediation or patch has been released as of the publication date.

Successful exploitation can lead to heap memory corruption, which may cause application crashes or potentially allow an attacker to execute arbitrary code with local privileges. However, exploitation requires local access and no user interaction is needed. The medium CVSS score reflects these factors and the limited attack vector. There are no known exploits in the wild beyond the public exploit release.

No official patch or remediation is currently available from the vendor. Users should restrict local access to trusted users only and monitor for suspicious activity. Since the vendor has not responded or issued a fix, consider applying additional local security controls such as sandboxing or running Squirrel in restricted environments until a patch is released. Check the vendor advisory regularly for updates on remediation.