CVE-2022-30292

thread_call in sqbaselib.cpp in SQUIRREL 3.2 lacks a certain sq_reservestack call.

10.0 CriticalPublic exploitFix available

Heap-based buffer overflow in sqbaselib.cpp in SQUIRREL 3.2 due to lack of a certain sq_reservestack call.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

3.56%Up 2.7 points since May 5, 2022

What each source reports

NVD Score used 10.0

Heap-based buffer overflow in sqbaselib.cpp in SQUIRREL 3.2 due to lack of a certain sq_reservestack call.

Record: CVE-2022-30292
CVSS 3.1: 10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness: CWE-787
Updated: 2026-11-02

CVE List No score

Heap-based buffer overflow in sqbaselib.cpp in SQUIRREL 3.2 due to lack of a certain sq_reservestack call.

Record: CVE-2022-30292
Updated: 2026-11-02

EUVDEUVD-2022-52243 No score

Heap-based buffer overflow in sqbaselib.cpp in SQUIRREL 3.2 due to lack of a certain sq_reservestack call.

Record: EUVD-2022-52243
Updated: 2026-11-03

GitHub AdvisoriesGHSA-v26v-vfh5-54qp 10.0

thread_call in sqbaselib.cpp in SQUIRREL 3.2 lacks a certain sq_reservestack call.

thread_call in sqbaselib.cpp in SQUIRREL 3.2 lacks a certain sq_reservestack call.

Record: GHSA-v26v-vfh5-54qp
CVSS 3.1: 10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Weakness: CWE-787
Updated: 2026-11-02

OSVDEBIAN-CVE-2022-30292 10.0

Heap-based buffer overflow in sqbaselib.cpp in SQUIRREL 3.2 due to lack of a certain sq_reservestack call.

Record: DEBIAN-CVE-2022-30292
CVSS 3.1: 10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-03

OSVUBUNTU-CVE-2022-30292 10.0

Heap-based buffer overflow in sqbaselib.cpp in SQUIRREL 3.2 due to lack of a certain sq_reservestack call.

Record: UBUNTU-CVE-2022-30292
CVSS 3.1: 10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSV No score

Heap-based buffer overflow in sqbaselib.cpp in SQUIRREL 3.2 due to lack of a certain sq_reservestack call.

Record: CVE-2022-30292
Updated: 2026-11-02

OSVMGASA-2022-0204 No score

Updated supertux packages fix security vulnerability

squirrel: thread_call in sqbaselib.cpp lacks a certain sq_reservestack call (CVE-2022-30292)

Record: MGASA-2022-0204
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`squirrel3` Debian:13	before 3.1-8.2	3.1-8.2
`supertux` Mageia:8	before 0.6.2-4.1.mga8	0.6.2-4.1.mga8
`squirrel3` Ubuntu:18.04:LTS	All versions, plus listed versions 3.1-43.1-5	None known
`squirrel3` Ubuntu:20.04:LTS	All versions, plus listed versions 3.1-83.1-8build1	None known
`squirrel3` Ubuntu:22.04:LTS	All versions, plus listed versions 3.1-8build1	None known
`squirrel3` Ubuntu:25.10	All versions, plus listed versions 3.1-8.2	None known
`squirrel3` Ubuntu:26.10	All versions, plus listed versions 3.1-8.33.1-8.43.1-8.5	None known
`squirrel3` Ubuntu:26.04:LTS	All versions, plus listed versions 3.1-8.23.1-8.3	None known

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
PoC in GitHub	sprushed/CVE-2022-30292	2022-05-10

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-30292 is a critical vulnerability (CVSS 10.0) in Squirrel-lang Squirrel, published May 4, 2022. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.56%, the 89th percentile. Fixed in squirrel3 3.1-8.2.

References

Show 13 moreShow less