Description
A security flaw has been discovered in janet-lang janet up to 1.41.0. This affects the function doframe of the file src/core/debug.c. Performing a manipulation results in out-of-bounds read. Attacking locally is a requirement. The exploit has been released to the public and may be used for attacks. The patch is named ed17dd2c5913a23fb1107251e44a9410a3c30cf5.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| janet-lang | janet | 1.0, 1.1, 1.2, 1.3, 1.4, 1.5, 1.6, 1.7, 1.8, 1.9, 1.10, 1.11, 1.12, 1.13, 1.14, 1.15, 1.16, 1.17, 1.18, 1.19, 1.20, 1.21, 1.22, 1.23, 1.24, 1.25, 1.26, 1.27, 1.28, 1.29, 1.30, 1.31, 1.32, 1.33, 1.34, 1.35, 1.36, 1.37, 1.38, 1.39, 1.40, 1.41.0 | — |
References
- VDB-367546 | janet-lang janet debug.c doframe out-of-bounds vdb-entry technical-description
- VDB-367546 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- CVE-2026-10267 | CVE Analysis and Report third-party-advisory
- Submit #825072 | janet-lang janet 1.41.0 Out-of-Bounds Read third-party-advisory
- https://github.com/janet-lang/janet/issues/1743 issue-tracking
- https://github.com/janet-lang/janet/issues/1743#issuecomment-4322129448 issue-tracking
- https://github.com/biniamf/pocs/tree/main/janet-debug-janet-doframe-env-data-oobread exploit
- https://github.com/janet-lang/janet/commit/ed17dd2c5913a23fb1107251e44a9410a3c30cf5 patch
- https://github.com/janet-lang/janet/ product