Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
jnwatson/py-lmdb
master @ 65cbdfd
12
Fixes
5
CVEs
CRITICAL
Peak severity
87.5%
Coverage
Highlights
Memory Corruption: 5 prior fixes. Scrutinize any change in this area.
lmdb/cpython.c: most-fixed (8 issues). Treat as high-risk during review.
10 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Memory Corruption: Multi-threaded race conditions during concurrent transaction commits, aborts, and environment closures repeatedly bypass safety guarantees and release the GIL prematurely, leaving stale pointers active in sibling threads. Object state must be strictly invalidated before releasing locks.
Buffer Overflow: Maliciously crafted local database files can corrupt database structures (pages, sub-pages, nodes, and keys) to execute out-of-bounds writes during parsing, as exemplified by CVE-2019-16224 through CVE-2019-16228.
Integer Overflow: Truncation and narrowing of database field sizes (MDB_val) during conversion to Python byte structures or memory views can allow attackers to read outside bounds or trigger heap out-of-bounds writes.