PT-2026-45428 · Janet Lang · Janet

Biniam · Publicado 2026-06-01 · Atualizado 2026-06-01 · CVE-2026-10267

Mitre

CVSS v3.1

3.3

Baixa

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

A security flaw has been discovered in janet-lang janet up to 1.41.0. This affects the function doframe of the file src/core/debug.c. Performing a manipulation results in out-of-bounds read. Attacking locally is a requirement. The exploit has been released to the public and may be used for attacks. The patch is named ed17dd2c5913a23fb1107251e44a9410a3c30cf5.

Exploit

Correção

Buffer Overflow

Out of bounds Read

Enumeração de Fraquezas

CWE-119

CWE-125

Identificadores relacionados

CVE-2026-10267

Produtos afetados

Janet

Referências · 10

• 🔥 https://github.com/biniamf/pocs/tree/main/janet-debug-janet-doframe-env-data-oobread · Exploit
• https://github.com/janet-lang/janet/commit/ed17dd2c5913a23fb1107251e44a9410a3c30cf5 · Correção
• https://github.com/janet-lang/janet/issues/1743#issuecomment-4322129448 · Nota
• https://github.com/janet-lang/janet/issues/1743 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-10267 · Nota de Segurança
• https://vuldb.com/cve/CVE-2026-10267 · Nota
• https://vuldb.com/vuln/367546/cti · Nota
• https://vuldb.com/vuln/367546 · Nota
• https://vuldb.com/submit/825072 · Nota
• https://github.com/janet-lang/janet · Nota