CVE catalog

CVE-2026-112021

UBUNTU-CVE-2026-112021

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.67% · Oct 25, 2026

snac2 before 2.93 contains a heap-based buffer overflow vulnerability in _xs_json_load_lexer() that allows unauthenticated remote attackers to corrupt heap memory by sending JSON strings containing a \u0000 escape. Attackers can send a single crafted application/activity+json POST to activitypub_post_handler(), which parses it before signature checks, overflowing heap allocations and crashing the server.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiansnac2132.75-2vulnerable
Debiansnac2132.81-1vulnerable
Debiansnac2132.81-1~bpo13+1vulnerable
Debiansnac2132.81-1~bpo13+2vulnerable
Debiansnac2132.82-1vulnerable
Debiansnac2132.82-1~bpo13+1vulnerable
Debiansnac2132.83-1vulnerable
Debiansnac2132.83-1~bpo13+1vulnerable
Debiansnac2132.84-1vulnerable
Debiansnac2132.84-1~bpo13+1vulnerable
Debiansnac2132.84-2vulnerable
Debiansnac2132.84-2~bpo13+1vulnerable
Debiansnac2132.84-3vulnerable
Debiansnac2132.84-3~bpo13+1vulnerable
Debiansnac2132.85-1vulnerable
Debiansnac2132.85-1~bpo13+1vulnerable
Debiansnac2132.87-1vulnerable
Debiansnac2132.87-1~bpo13+1vulnerable
Debiansnac2132.88-1vulnerable
Debiansnac2132.88-1~bpo13+1vulnerable
Debiansnac2132.89-1vulnerable
Debiansnac2132.89-1~bpo13+1vulnerable
Debiansnac2132.90-1vulnerable
Debiansnac2132.90-1~bpo13+1vulnerable
Debiansnac2132.91-1vulnerable
Debiansnac2132.91-1~bpo13+1vulnerable
Debiansnac2132.92-1vulnerable
Debiansnac2132.92-1~bpo13+1vulnerable
Debiansnac2132.93-1vulnerable
Debiansnac2132.93-1~bpo13+1vulnerable
Debiansnac2132.94-1vulnerable
Debiansnac2132.94-1~bpo13+1vulnerable
Debiansnac2132.95-1vulnerable
Debiansnac2132.95-1~bpo13+1vulnerable
Debiansnac2132.96-1vulnerable
Debiansnac2132.96-1~bpo13+1vulnerable
Debiansnac2142.75-2vulnerable
Debiansnac2142.81-1vulnerable
Debiansnac2142.81-1~bpo13+1vulnerable
Debiansnac2142.81-1~bpo13+2vulnerable
Debiansnac2142.82-1vulnerable
Debiansnac2142.82-1~bpo13+1vulnerable
Debiansnac2142.83-1vulnerable
Debiansnac2142.83-1~bpo13+1vulnerable
Debiansnac2142.84-1vulnerable
Debiansnac2142.84-1~bpo13+1vulnerable
Debiansnac2142.84-2vulnerable
Debiansnac2142.84-2~bpo13+1vulnerable
Debiansnac2142.84-3vulnerable
Debiansnac2142.84-3~bpo13+1vulnerable
Debiansnac2142.85-1vulnerable
Debiansnac2142.85-1~bpo13+1vulnerable
Debiansnac2142.87-1vulnerable
Debiansnac2142.87-1~bpo13+1vulnerable
Debiansnac2142.88-1vulnerable
Debiansnac2142.88-1~bpo13+1vulnerable
Debiansnac2142.89-1vulnerable
Debiansnac2142.89-1~bpo13+1vulnerable
Debiansnac2142.90-1vulnerable
Debiansnac2142.90-1~bpo13+1vulnerable
Debiansnac2142.91-1vulnerable
Debiansnac2142.91-1~bpo13+1vulnerable
Debiansnac2142.92-1vulnerable
Debiansnac2142.92-1~bpo13+1vulnerable
Debiansnac2142.93-1~bpo13+1vulnerable
Debiansnac2142.93-1fixed
Ubuntusnac224.042.25-3vulnerable
Ubuntusnac224.042.41-1vulnerable
Ubuntusnac224.042.42-1vulnerable
Ubuntusnac224.042.42-2vulnerable
Ubuntusnac224.042.45-1vulnerable
Ubuntusnac224.042.45-1build2vulnerable
Ubuntusnac224.042.45-1build3vulnerable
Ubuntusnac226.042.75-2vulnerable
Ubuntusnac226.042.84-1vulnerable
Ubuntusnac226.042.84-2vulnerable
Ubuntusnac226.042.84-3vulnerable
Ubuntusnac226.042.85-1vulnerable
Ubuntusnac226.042.87-1vulnerable
Ubuntusnac226.042.88-1vulnerable
Ubuntusnac226.042.89-1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiansnac2deb142.93-1Not reportedDEBIAN-CVE-2026-112021Not reported

OpenFactory catalog packages

[Debian 13 (Trixie)]

  • [snac2]Affected
    Details (4)

    • 2.75-2 · amd64 · trixie

      Affected

      pypi · snac2 · debian · 13

    • 2.75-2 · arm64 · trixie

      Affected

      pypi · snac2 · debian · 13

    • 2.94-1~bpo13+1 · amd64 · trixie-backports

      Affected

      pypi · snac2 · debian · 13

    • 2.94-1~bpo13+1 · arm64 · trixie-backports

      Affected

      pypi · snac2 · debian · 13

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database]