apitrace: Heap-based buffer overflow in SnappyFile::flushReadCache (CVE-2026-126050)
apitrace versions 2.0 through 14.0 contain a heap-based buffer overflow in the SnappyFile::flushReadCache() function, allowing attackers to write past the m_compressedCache buffer via a crafted .trace file.
CVE search metadata
CVE search record: CVE-2026-126050. Severity: high. CVSS: 7.8. KEV: no. Product: apitrace (2.0 through 14.0). Brief: apitrace: Heap-based buffer overflow in SnappyFile::flushReadCache (CVE-2026-126050). Brief link: https://feed.craftedsignal.io/briefs/2026-11-apitrace-heap-overflow/
Triage facts
Revision 1- Applicability
- apitrace (2.0 through 14.0)
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 10, 18:28 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
A heap-based buffer overflow exists in apitrace versions 2.0 through 14.0 within the SnappyFile::flushReadCache() function. Attackers can supply a crafted .trace file with a 4-byte chunk length that exceeds the fixed size of the m_compressedCache buffer. When users dump, inspect, or replay these files, heap memory is corrupted.