CVE-2026-3385
EUVD-2026-912001.03.2026, 09:15
A vulnerability was detected in wren-lang wren up to 0.4.0. Affected is the function resolveLocal of the file src/vm/wren_compiler.c. The manipulation results in uncontrolled recursion. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| wren | wren | 𝑥 ≤ 0.4.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-404 - Improper Resource Shutdown or ReleaseThe program does not release or incorrectly releases a resource before it is made available for re-use.
- CWE-674 - Uncontrolled RecursionThe product does not properly control the amount of recursion which takes place, consuming excessive resources, such as allocated memory or the program stack.