Title: Janet-lang Janet c43e066 Heap-based Buffer Overflow Description: - Found a heap-buffer-overflow vulnerability in Janet. - Crash occurs during runtime in the function. - ASAN report shows a READ violation of size 1 at a 41-byte allocated region boundary. - Vulnerability confirmed and fixed with commit 0f28585. Environment: - OS: Linux x86_64 - Compiler: Clang - Build Configuration: Release mode with ASan enabled. Vulnerability Details: - Target: Janet (janet-lang) - Type: CWE-125: Out-of-bounds Read - Function: - Location: - Root cause: fails to stop at the null terminator while iterating over the format string.