CVE-2026-22185

Name of the Vulnerable Software and Affected Versions OpenLDAP Lightning Memory-Mapped Database (LMDB) versions up to and including 0.9.14

Description The software contains a heap buffer underflow in the readline() function of mdb load. Processing malformed input with an embedded NUL byte can cause an unsigned offset calculation to underflow, resulting in an out-of-bounds read of one byte before the allocated heap buffer. This can lead to a denial-of-service condition due to a crash.

Recommendations Versions prior to 0.9.14 and commit 8e1fda8 should be updated.