Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

infiniflow/infinity

              main @ 9383e95
            

Fixes

CVEs

CRITICAL

Peak severity

34.5%

Coverage

Highlights

Denial of Service: 22 prior fixes. Scrutinize any change in this area.

src/executor/operator/physical_import.cpp: most-fixed (3 issues). Treat as high-risk during review.

8 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Denial of Service: KNN search operations are highly vulnerable to system-wide crashes (Denial of Service) when processing unhandled indexing anomalies, out-of-bounds column accesses, or unimplemented data types/distance metrics, leading to process termination via UnrecoverableError.

Buffer Overflow: The CSV and data importing subsystem is highly prone to heap/stack buffer overflows and memory corruption due to improper size-based offset calculations and unchecked column counts during embedding and varchar type importing.

Path Traversal: Absolute paths embedded in write-ahead logs (WAL) can bypass intended directory isolation during database recovery or replay, leading to arbitrary local file read/write operations via the file system interface.