Vectordb
Monthly
Epsilla-cloud VectorDB's filter query parser crashes under malformed input due to an improper exception/condition check (CWE-754) in the SplitTokens and ShuntingYard functions of engine/query/expr/expr.cpp. All releases from 0.3.0 through 0.3.18 (including commit df5a5f5afb85a2376a0f2f316c79dea9b2c6ac7a) are affected. A local, low-privileged user who can submit filter expressions to the database engine can trigger an abnormal termination of the parser, causing an availability impact. A public proof-of-concept exploit exists; the vendor did not respond to responsible disclosure.
Epsilla-cloud VectorDB's filter query parser crashes under malformed input due to an improper exception/condition check (CWE-754) in the SplitTokens and ShuntingYard functions of engine/query/expr/expr.cpp. All releases from 0.3.0 through 0.3.18 (including commit df5a5f5afb85a2376a0f2f316c79dea9b2c6ac7a) are affected. A local, low-privileged user who can submit filter expressions to the database engine can trigger an abnormal termination of the parser, causing an availability impact. A public proof-of-concept exploit exists; the vendor did not respond to responsible disclosure.