🎯 New Report #3849040: #mysql50# legacy alias / stale table cache identity mismatch
🔺Severity: null
👽 Reporter: vortfu
⭐️ Reputation: 519
🛠 State: resolved
💼 Team: MariaDB
💵 Bounty: null
🕐 Submitted: 2026-07-07
⏰ Disclosed: 2026-10-07 19:47:34
📝 Summary: A legacy compatibility mechanism for table name prefixes in MariaDB was exploited to cause a mismatch between the table definition cache and actual table metadata. By opening a table through one spelling and replacing it through an alternative alias, the cache was poisoned with stale metadata. This stale metadata was then used against new attacker-controlled file data, enabling out-of-bounds memory reads, arbitrary memory reads and writes, and remote code execution through various exploitation chains involving different storage engines and field types.
📂 Report JSON File: 3849040
@hackeronereports