CVE-2026-3382

A security flaw has been discovered in ChaiScript up to 6.1.0. The impacted element is the function chaiscript::Boxed_Number::get_as of the file include/chaiscript/dispatchkit/boxed_number.hpp. Performing a manipulation results in memory corruption. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

• CWE-119
• CWE-787

• https://github.com/ChaiScript/ChaiScript/Product
• https://github.com/ChaiScript/ChaiScript/issues/635Issue Tracking
• https://github.com/ChaiScript/ChaiScript/issues/635#issue-3828258513Issue Tracking
• https://vuldb.com/?ctiid.348268Permissions Required, VDB Entry
• https://vuldb.com/?id.348268Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.761301Third Party Advisory, VDB Entry

Published

Mar 1, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-33813Parsing a WEBP image with an invalid, large size panics on 3…7.5
• CVE-2026-33814When processing HTTP/2 SETTINGS frames, transport will enter…7.5
• CVE-2026-33815Memory-safety vulnerability in github.com/jackc/pgx/v5.9.8
• CVE-2026-33816Memory-safety vulnerability in github.com/jackc/pgx/v5.9.8
• CVE-2026-33817Rejected reason: CVE confirmed to be a false positive
• CVE-2026-33819Deserialization of untrusted data in Microsoft Bing allows a…9.8
• CVE-2026-33821Improper privilege management in Microsoft Dynamics 365 Cust…9.9
• CVE-2026-33822Out-of-bounds read in Microsoft Office Word allows an unauth…6.1
• CVE-2026-33823Improper authorization in Microsoft Teams allows an authoriz…6.5
• CVE-2026-33824Double free in Windows IKE Extension allows an unauthorized …9.8
• CVE-2026-33825Insufficient granularity of access control in Microsoft Defe…7.8
• CVE-2026-33826Improper input validation in Windows Active Directory allows…8