Hackerone Reports on Telegram: “🎯 New Report #3771139: Heap Memory Disclosure v…”

🎯 New Report #3771139: Heap Memory Disclosure via Integer Underflow in Item func json arrayagg::cut max length in MariaDB Server
🔺Severity: null
👽 Reporter: lukas kupczyk
⭐️ Reputation: 128
🛠 State: resolved
💼 Team: MariaDB
💵 Bounty: null
🕐 Submitted: 2026-05-30
⏰ Disclosed: 2026-09-15 09:38:49
📝 Summary: A vulnerability was discovered in the JSON ARRAYAGG aggregate function of MariaDB Server. The vulnerability was caused by an integer underflow in the cut max length function, which could allow an authenticated user to read arbitrary heap memory from the server process. The vulnerability was introduced in commit 6c573a9146caa76807db1190e0747f5befb5b170 (2020-06-15) and affected versions of MariaDB Server prior to 10.5.4.
📂 Report JSON File: 3771139
@hackeronereports