CVE-2026-10267
LowCVSS 3.3Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
A security flaw in janet-lang janet up to version 1.41.0 affects the doframe function in src/core/debug.c, causing an out-of-bounds read. Local access is required, and the exploit is publicly available.
Risk Assessment
A local attacker could read sensitive memory contents, potentially leading to information disclosure or system instability.
Recommendation
Apply the patch identified as ed17dd2c5913a23fb1107251e44a9410a3c30cf5 immediately to fix the vulnerability.
Original NVD description (English source)
A security flaw has been discovered in janet-lang janet up to 1.41.0. This affects the function doframe of the file src/core/debug.c. Performing a manipulation results in out-of-bounds read. Attacking locally is a requirement. The exploit has been released to the public and may be used for attacks. The patch is named ed17dd2c5913a23fb1107251e44a9410a3c30cf5.