{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/surrealdb-core--3.3.0/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:surrealdb:surrealdb:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.8,"id":"CVE-2026-121417"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["surrealdb-core (\u003c 3.3.0)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["SurrealDB"],"content_html":"\u003cp\u003eSurrealDB versions before 3.3.0 contain a use-after-free vulnerability in the surrealdb-core KV backends. The flaw occurs when borrowed transaction state is passed into affinitypool::spawn_local closures that rely on future Drop for safety. If a Rust embedder leaks a dispatched future, such as through the use of \u003ccode\u003emem::forget\u003c/code\u003e, the pool worker may access memory that has already been freed, leading to crashes or memory corruption.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eAn attacker or a malformed application can induce memory corruption or cause the SurrealDB process to crash, resulting in a potential denial-of-service or memory instability.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade SurrealDB to version 3.3.0 or later to include the fix for CVE-2026-121417.\u003c/li\u003e\n\u003cli\u003eReview custom Rust integrations or embedders that interact with the surrealdb-core library to ensure that futures are not improperly leaked or that the transaction lifecycle is strictly managed.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-03T15:59:43Z","date_published":"2026-11-03T15:59:43Z","id":"https://feed.craftedsignal.io/briefs/2026-11-surrealdb-uaf/","summary":"SurrealDB versions prior to 3.3.0 are vulnerable to a use-after-free condition in the KV backend that can be triggered by Rust embedders that leak dispatched futures.","title":"SurrealDB: Use-after-free in surrealdb-core (CVE-2026-121417)","url":"https://feed.craftedsignal.io/briefs/2026-11-surrealdb-uaf/"}],"language":"en","title":"CraftedSignal Threat Feed - Surrealdb-Core (\u003c 3.3.0)","version":"https://jsonfeed.org/version/1.1"}