CVE-2026-2258

3.3 LOW
Published: February 10, 2026 Modified: February 17, 2026
View on NVD

Description

A flaw has been found in aardappel lobster up to 2025.4. Affected by this vulnerability is the function WaveFunctionCollapse in the library dev/src/lobster/wfc.h. Executing a manipulation can lead to memory corruption. The attack can only be executed locally. The exploit has been published and may be used. This patch is called c2047a33e1ac2c42ab7e8704b33f7ea518a11ffd. It is advisable to implement a patch to correct this issue.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

CVSS v3.x Details

0.0 Low Medium High Critical 10.0
Vector String
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
https://github.com/aardappel/lobster/
Source: cna@vuldb.com
Product
https://github.com/aardappel/lobster/issues/395
Source: cna@vuldb.com
Patch Vendor Advisory
https://vuldb.com/?ctiid.345005
Source: cna@vuldb.com
Permissions Required VDB Entry
https://vuldb.com/?id.345005
Source: cna@vuldb.com
Third Party Advisory VDB Entry
https://vuldb.com/?submit.753167
Source: cna@vuldb.com
Exploit Third Party Advisory VDB Entry

8 reference(s) from NVD

Quick Stats

CVSS v3 Score
3.3 / 10.0
EPSS (Exploit Probability)
0.0%
4th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

Affected Vendors

strlen