Skip to main content
Disclosures

NASA · CryptoLib

Heap Buffer Overflow in MariaDB SA Hexstring Conversion

SecMateSECMATE-2025-0003
VendorNASA
ProductCryptoLib
ReportedNovember 29, 2025
FixedJanuary 6, 2026
PublishedJanuary 9, 2026

The convert_hexstring_to_byte_array() function in the MariaDB SA interface writes decoded bytes into a caller-provided buffer without any capacity check. When importing SA fields from the database (e.g., IV, ARSN, ABM), a malformed or oversized hex string in the database can overflow the destination buffer, corrupting adjacent heap memory.

What's hidden in yours?

Find out