Skip to main content
Disclosures

NASA · CryptoLib

Heap Buffer Overflow in MariaDB SA Hexstring Conversion

5.7medium
SecMateSECMATE-2025-0003
VendorNASA
ProductCryptoLib
VectorCVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
Timeline
Reported
Nov 29, 2025
Fixed
Jan 6, 2026
Published
Jan 9, 2026
Summary

The convert_hexstring_to_byte_array() function in the MariaDB SA interface writes decoded bytes into a caller-provided buffer without any capacity check. When importing SA fields from the database (e.g., IV, ARSN, ABM), a malformed or oversized hex string in the database can overflow the destination buffer, corrupting adjacent heap memory.

What's hidden in yours?

Find out