Intel

AIKIDO-2025-10610

slatedb is vulnerable to Integer Overflow

Integer Overflow Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
Published Sep 9, 2025

30

Low Risk

This Affects:

Rustslatedb
0.5.0 - 0.8.0
Fixed in 0.8.1
Are you affected? Scan for Free

TL;DR

Affected versions of this package are vulnerable to a Denial of Service (DoS) via Integer Overflow in SstRowCodecV0 due to improper validation of key/value sizes in put methods. Attackers could exploit this by supplying keys larger than u16::MAX or values larger than u32::MAX, triggering a panic and causing the application to crash.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range.

Background info

slatedb is vulnerable to Integer Overflow in versions 0.5.0 - 0.8.0.

How to fix this

Upgrade the slatedb library to the patch version.