CVE-2026-2858 | wren-lang wren up to 0.4.0 Source File Parser src/vm/wren_compiler.c peekChar out-of-bounds (Issue 1217)

A vulnerability categorized as problematic has been discovered in wren-lang wren up to 0.4.0. This affects the function peekChar of the file src/vm/wren_compiler.c of the component Source File Parser. Such manipulation leads to out-of-bounds read.

This vulnerability is documented as CVE-2026-2858. The attack needs to be performed locally. Additionally, an exploit exists.

The project was informed of the problem early through an issue report but has not responded yet.