A vulnerability has been found in ChaiScript up to 6.1.0 and classified as problematic. The impacted element is the function
chaiscript::Boxed_Number::get_as of the file include/chaiscript/dispatchkit/boxed_number.hpp. Performing a manipulation results in memory corruption.
This vulnerability is reported as CVE-2026-3382. The attack requires a local approach. Moreover, an exploit is present.
The project was informed of the problem early through an issue report but has not responded yet.
