A vulnerability, which was classified as problematic, has been found in berry-lang berry up to 1.1.0. The affected element is the function scan_string of the file src/be_lexer.c. This manipulation causes out-of-bounds read.

This vulnerability appears as CVE-2026-3285. The attack requires local access. In addition, an exploit is available.

Applying a patch is the recommended action to fix this issue.