CVE-2026-2242

Name
CVE-2026-2242
Description
A vulnerability was determined in janet-lang janet up to 1.40.1. This impacts the function janetc_if of the file src/core/specials.c. Executing a manipulation can lead to out-of-bounds read. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. This patch is called c43e06672cd9dacf2122c99f362120a17c34b391. It is advisable to implement a patch to correct this issue.
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
cna@vuldb.com https://github.com/janet-lang/janet/
cna@vuldb.com https://github.com/janet-lang/janet/commit/c43e06672cd9dacf2122c99f362120a17c34b391
cna@vuldb.com https://github.com/janet-lang/janet/issues/1700
cna@vuldb.com https://github.com/janet-lang/janet/issues/1702
cna@vuldb.com https://github.com/oneafter/0123/blob/main/ja2/repro
cna@vuldb.com https://vuldb.com/?ctiid.344981
cna@vuldb.com https://vuldb.com/?id.344981
cna@vuldb.com https://vuldb.com/?submit.754495

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:janet-lang:janet:*:*:*:*:*:*:*:* janet >= None <= 1.40.1

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
janet edge-community 1.40.1-r0 Will Sinatra <wpsinatra@gmail.com> possibly vulnerable
janet edge-community 1.40.0-r0 Will Sinatra <wpsinatra@gmail.com> possibly vulnerable
janet edge-community 1.39.1-r0 Will Sinatra <wpsinatra@gmail.com> possibly vulnerable
janet edge-community 1.39.0-r0 Will Sinatra <wpsinatra@gmail.com> possibly vulnerable
janet edge-community 1.38.0-r0 Will Sinatra <wpsinatra@gmail.com> possibly vulnerable
janet edge-community 1.37.1-r0 Will Sinatra <wpsinatra@gmail.com> possibly vulnerable
janet edge-community 1.36.0-r0 Will Sinatra <wpsinatra@gmail.com> possibly vulnerable
janet edge-community 1.22.0-r0 Will Sinatra <wpsinatra@gmail.com> possibly vulnerable
janet 3.23-community 1.40.1-r0 Will Sinatra <wpsinatra@gmail.com> possibly vulnerable