🎯 New Report #3766217: libmariadb ( mariadb-connector-c ): stack overflow via server-controlled field->length in prepared-statement codec
🔺Severity: Medium
👽 Reporter: fg0x0
⭐️ Reputation: 729
🛠 State: resolved
💼 Team: MariaDB
💵 Bounty: null
🕐 Submitted: 2026-05-28
⏰ Disclosed: 2026-10-04 07:44:56
📝 Summary: A stack overflow vulnerability was discovered in the prepared-statement codec of the database connector library. The vulnerability allowed a malicious database server or network attacker to crash client applications by sending specially crafted column-definition packets with excessively large field-length values. When clients attempted to fetch query results, the field-length value was read without validation and passed directly to a stack allocation function, causing immediate process termination. The issue affected multiple versions of the connector library and downstream applications using prepared statements for database queries.
📂 Report JSON File: 3766217
@hackeronereports