🎯 New Report #3909248: MariaDB: heap buffer overflow in ha tina::chain append() lets a low-privileged user crash the server via CSV row deletion
🔺Severity: Medium
👽 Reporter: v3rtical
⭐️ Reputation: 153
🛠 State: resolved
💼 Team: MariaDB
💵 Bounty: null
🕐 Submitted: 2026-08-02
⏰ Disclosed: 2026-09-07 19:59:03
📝 Summary: A heap buffer overflow vulnerability was discovered in the ha tina::chain append() function of the MariaDB database server. The vulnerability was caused by an incorrect memory allocation during the growth of a data structure. This could allow a low-privileged user to crash the server by executing a specific SQL command involving CSV data deletion. The vulnerability was confirmed to affect both the stock Ubuntu package and a source build of MariaDB.
📂 Report JSON File: 3909248
@hackeronereports