A heap-based buffer over-read has been assigned CVE-2026-24821 after researchers identified a flaw in the Lua parsing code of turanszkij’s WickedEngine that can be triggered when the engine compiles untrusted Lua code; the flaw is rooted in lparser.C and affects WickedEngine releases through...
