🎯 New Report #3771144: Use-After-Free in BTREE Index Traversal via Stale key version in heap update() in MariaDB Server
🔺Severity: null
👽 Reporter: lukas kupczyk
⭐️ Reputation: 128
🛠 State: resolved
💼 Team: MariaDB
💵 Bounty: null
🕐 Submitted: 2026-05-30
⏰ Disclosed: 2026-09-14 16:05:36
📝 Summary: A use-after-free vulnerability was discovered in the MEMORY (HEAP) storage engine of MariaDB Server. The vulnerability was caused by incorrect handling of the key changed variable in the heap update() function, which could lead to stale pointers being dereferenced during BTREE index traversal. While the vulnerability could be triggered by an authenticated user with standard database privileges, no further details on the potential impact were provided.
📂 Report JSON File: 3771144
@hackeronereports