OSV-2026-1309

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/janet/OSV-2026-1309.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2026-1309
Published
2026-09-21T00:10:08Z
Modified
2026-09-21T00:10:08Z
Summary
Heap-buffer-overflow in janet_bytecode_movopt_basic_block
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=563659412

Crash type: Heap-buffer-overflow READ 4
Crash state:
janet_bytecode_movopt_basic_block
janet_bytecode_movopt_full
janet_bytecode_optimize
References

Affected packages

OSS-Fuzz / janet

Package

Name
janet
Purl
pkg:generic/janet

Affected ranges

Type
GIT
Repo
https://github.com/janet-lang/janet
Events
Introduced
c29050eeda52d117095d2551b7abcf2e98cc9574
Fixed
d763d0d51afddceeb251bc6dd6e9458cc4ec0484

Ecosystem specific 

{
    "severity":  "MEDIUM"
}

Database specific

fixed_range 
"4fc4c8c351aa7062083cd5ce9ffe411f1c3ae64d:d763d0d51afddceeb251bc6dd6e9458cc4ec0484"
introduced_range 
"832159a677e3fd1c45a6fe88427e05555acc7a36:4fc4c8c351aa7062083cd5ce9ffe411f1c3ae64d"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/janet/OSV-2026-1309.yaml"