CVE-2026-121417 — Vulnerability intelligence
—
Published:
- CVSS
- 8.8
- CISA KEV
- Not listed; not proof of no exploitation
Original source text (not a translation)
SurrealDB before 3.3.0 contains a use-after-free vulnerability in surrealdb-core KV backends that pass borrowed transaction state into affinitypool::spawn_local closures relying on future Drop for safety. Rust embedders that leak a dispatched future (e.g. via mem::forget) and drop the transaction cause pool workers to read and write freed memory, risking crashes or memory corruption.