CVE-2026-10268

LOW

janet-lang janet marsh.c unmarshal_one_fiber integer overflow

Title source: cna
STIX 2.1

Description

A weakness has been identified in janet-lang janet up to 1.41.0. This vulnerability affects the function unmarshal_one_fiber of the file src/core/marsh.c. Executing a manipulation can lead to integer overflow. It is possible to launch the attack on the local host. The exploit has been made available to the public and could be used for attacks. This patch is called d9b1d711ea1fde52ac73a82088b512a3e17bad0d. A patch should be applied to remediate this issue.

References (8)

Core 8
Core References
Vdb Entry, Technical Description vdb-entry technical-description
VDB-367547 | janet-lang janet marsh.c unmarshal_one_fiber integer overflow
https://vuldb.com/vuln/367547
Signature, Permissions Required signature permissions-required
VDB-367547 | CTI Indicators (IOB, IOC, IOA)
https://vuldb.com/vuln/367547/cti
Third Party Advisory third-party-advisory
CVE-2026-10268 | CVE Analysis and Report
https://vuldb.com/cve/CVE-2026-10268
Third Party Advisory third-party-advisory
Submit #825075 | janet-lang janet 1.41.0 Integer Overflow
https://vuldb.com/submit/825075
Issue Tracking issue-tracking
https://github.com/janet-lang/janet/issues/1744

Scores

CVSS v3 3.3
EPSS 0.0012
EPSS Percentile 2.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Details

CWE
CWE-189 CWE-190
Status published
Products (42)
janet-lang/janet 1.0
janet-lang/janet 1.1
janet-lang/janet 1.10
janet-lang/janet 1.11
janet-lang/janet 1.12
janet-lang/janet 1.13
janet-lang/janet 1.14
janet-lang/janet 1.15
janet-lang/janet 1.16
janet-lang/janet 1.17
... and 32 more
Published Jun 01, 2026
Tracked Since Jun 01, 2026