Bruce Dang

A race condition occurs due to insufficient locking, which may allow a local user to read kernel memory. A race condition is a situation where the system's substantive behavior is dependent on the sequence or timing of other uncontrollable events.

A use-after-free issue, which occurs when a program continues to use a pointer after it has been freed, was addressed with improved memory management. Mounting a maliciously crafted SMB network share may lead to system termination.

Integer wraparound in multiple server features allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds. This can lead to arbitrary code execution as the operating system user running the database. In applications that pass gigabyte-scale user inputs to the relevant database functions, the input provider may cause a segmentation fault, which is an error occurring when a program attempts to access a memory location that it is not allowed to access.