🎯 New Report #3769676: Stack Overflow DoS in ST GeomFromGeoJSON Allows Any Authenticated User to Crash the Entire Server
🔺Severity: Medium
👽 Reporter: byteoverride
⭐️ Reputation: 210
🛠 State: resolved
💼 Team: MariaDB
💵 Bounty: null
🕐 Submitted: 2026-05-29
⏰ Disclosed: 2026-09-03 22:13:55
📝 Summary: A vulnerability was discovered in the MariaDB database server's ST GeomFromGeoJSON function. Any authenticated user with basic SELECT privileges could crash the entire server by passing a deeply nested GeoJSON GeometryCollection. The crash was caused by unbounded recursion in the GeoJSON parser, which consumed the server's stack until it overflowed, leading to a SIGSEGV crash that killed all active connections and required a full server restart. The vulnerability existed since the introduction of ST GeomFromGeoJSON in MariaDB 10.2.4 and affected all versions through the current development trunk.
📂 Report JSON File: 3769676
@hackeronereports