CVE-2026-3392

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A weakness has been identified in FascinatedBox lily up to 2.3. The affected element is the function eval_tree of the file src/lily_emitter.c. This manipulation causes null pointer dereference. The attack is restricted to local execution. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-404 CWE-476

Affected software

Vendor	Product	Versions
FascinatedBox	lily	2.0; 2.1; 2.2; 2.3

References

https://github.com/FascinatedBox/lily/Product
https://github.com/FascinatedBox/lily/issues/384Exploit, Issue Tracking, Vendor Advisory
https://github.com/oneafter/0122/blob/main/i384/repro.lilyExploit
https://vuldb.com/?ctiid.348278Permissions Required, VDB Entry
https://vuldb.com/?id.348278Third Party Advisory, VDB Entry
https://vuldb.com/?submit.761328Third Party Advisory, VDB Entry

Timeline

Published: Mar 1, 2026
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-339203.5A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to missing validation of t CVE-2026-339215.2The Windows installer deployed Npcap leaving its access restriction option at the insecure default value, so the driver was accessible to ev CVE-2026-339226.0A path traversal vulnerability was discovered in the Offline archives functionality of the local web interface due to insufficient validatio CVE-2026-339237.2A signature verification vulnerability was discovered in the update installation functionality due to inconsistent validation of the update CVE-2026-339247.2Two OS command injection vulnerabilities were discovered in the update installation functionality due to insufficient validation of the upda CVE-2026-339294.3Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache PDFBox Examples. This issue affects CVE-2026-33937.8A security vulnerability has been detected in jarikomppa soloud up to 20200207. The impacted element is the function SoLoud::Wav::loadflac o CVE-2026-339305.9Apache Traffic Server copies the client Host header into a fixed-size stack buffer without a bound during redirect handling, so an over-long CVE-2026-339316.5OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, an Insecu CVE-2026-339325.4OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, a stored CVE-2026-339336.1OpenEMR is a free and open source electronic health records and medical practice management application. Starting in version 7.0.2.1 and pri CVE-2026-339344.3OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0.3 have a mi