UBUNTU-CVE-2026-126050: Buffer Overflow
apitrace 2.0 through 14.0 contains a heap-based buffer overflow in SnappyFile::flushReadCache() that allows attackers to write past mcompressedCache via an oversized compressed chunk length. Attackers can supply a crafted .trace file whose 4-byte chunk length exceeds the fixed buffer size, corrupting heap memory when users dump, inspect, or replay it.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Users of apitrace 2.0 through 14.0 are exposed when they dump, inspect, or replay an attacker-supplied crafted .trace file. The vulnerable software is identified as ubuntu/apitrace.
What must an attacker provide to trigger the overflow?
An attacker needs to supply a crafted .trace file containing a compressed chunk whose 4-byte length exceeds the fixed m_compressedCache buffer size. Processing that file can cause a write past the buffer and corrupt heap memory.