Skip to content

Instantly share code, notes, and snippets.

@GaranR

GaranR/CVE-2024-35618 Secret

Last active May 23, 2024 03:37
Show Gist options
  • Save GaranR/0b75c6f2c0215db39c910022daf6522c to your computer and use it in GitHub Desktop.
Save GaranR/0b75c6f2c0215db39c910022daf6522c to your computer and use it in GitHub Desktop.
Download ZIP
Raw
CVE-2024-35618
[CVE ID]
CVE-2024-35618
[PRODUCT]
PingCAP TiDB
[VERSION]
=v7.5.1
[PROBLEM TYPE]
buffer overflow
[DESCRIPTION]
PingCAP TiDB v7.5.1 was discovered to contain a NULL pointer
dereference via the component SortedRowContainer. The output
columns of the top plan are directly passed as the parentUsedCols
and then the parentUsedCols is modified during the pruning.
So the output columns changed unexpectedly.
[Reference]
https://github.com/pingcap/tidb/issues/52768
[FIX]
https://github.com/pingcap/tidb/pull/53325
[Discoverer]
Jiaju Bai, Qinglin Song, Zixuan Fu, Yu Sun, Jianwei Liu
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment