11 min read
MariaDB .frm Parsing OOB Read to vtable Hijacking RCE
How an out-of-bounds read in MariaDB's .frm metadata parser can be turned into a forged C++ object with a fake vtable, reaching arbitrary code execution as the mariadbd process (MDEV-40571).
Read full article