Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was determined in berry-lang berry up to 1.1.0. The affected element is the function scan_string of the file src/be_lexer.c. This manipulation causes out-of-bounds read. The attack requires local access. The exploit has been publicly disclosed and may be utilized. Patch name: 7149c59a39ba44feca261b12f06089f265fec176. Applying a patch is the recommended action to fix this issue.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2026-3285 A vulnerability was determined in berry-lang berry up to 1.1.0. The affected element is the function scan_string of the file src/be_lexer.c. This manipulation causes ou… https://www.cve.org/CVERecord?id=CVE-2026-3285
Post summary
The text announces CVE-2026-3285, detailing its impact on berry-lang up to 1.1.0 and the vulnerable scan_string function, but provides no PoC, exploit, patch, or evidence of active exploitation.
CVE-2026-3285 Out-of-Bounds Read Vulnerability in Berry-Lang Lexer Function scan_string https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3285
Post summary
An out‑of‑bounds read vulnerability (CVE-2026-3285) has been disclosed in the Berry‑Lang lexer function scan_string, with no PoC, exploit, or patch information provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | berry-lang | berry | 1.1.0 | - | - |