🎯 New Report #3896507: Server crash (stack-overflow DoS) via unbounded recursion in MariaDB WKB GEOMETRYCOLLECTION parser
🔺Severity: Medium
👽 Reporter: tsg1696
⭐️ Reputation: 131
🛠 State: resolved
💼 Team: MariaDB
💵 Bounty: null
🕐 Submitted: 2026-07-28
⏰ Disclosed: 2026-10-11 12:16:14
📝 Summary: A server crash vulnerability was identified in the WKB GEOMETRYCOLLECTION parser of a database server. The parser employed unbounded recursion without depth limits or stack overflow checks when processing nested geometry collections, allowing crafted input with deeply nested structures to exhaust thread stack memory and trigger a denial of service condition. The vulnerability was confirmed through testing with nested geometry structures that caused server crashes. The issue affected spatial functions and geometry column operations accessible to authenticated users with low privileges. A fix was recommended through implementation of recursion depth guards or maximum nesting limits.
📂 Report JSON File: 3896507
@hackeronereports