Out-of-bounds Read in Turanszkij Wickedengine

CVE-2026-24821

Out-of-bounds Read vulnerability in turanszkij WickedEngine (WickedEngine/LUA modules). This vulnerability is associated with program files lparser.C. This issue affects WickedEngine: through 0.71.727.

Vulnerability class: Buffer Overflow

EPSS: 0.003 (26.6th percentile) — read the EPSS interpretation.

Affected products

Turanszkij Wickedengine — versions 0

Weakness classification (CWE)

CWE-125 — Out-of-bounds Read

References

cve_disclosure@tech.gov.sg (patch)