Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Yzl0V3Zz

#32601of 60,463
8.8Total CVSS
Vulnerabilities · 1
PT-2026-136174
2026-10-19
8.8
CVE-2026-121417
Surrealdb
Surrealdb
A use-after-free issue exists in surrealdb-core KV backends. This occurs when borrowed transaction state is passed into `affinitypool::spawn local` closures that rely on future Drop for safety. In Rust embedders, leaking a dispatched future (for example, via `mem::forget`) and dropping the transaction can lead to pool workers reading and writing freed memory, which may result in crashes or memory corruption.