RethinkDB Buffer Overflow Vulnerability in cJSON String Parsing

A classic buffer overflow vulnerability has been identified in RethinkDB versions prior to 2.4.4. This issue arises in the cJSON library's string parsing function, where improper handling of UTF-16 surrogate pairs in JSON strings can lead to memory corruption and potentially allow arbitrary code execution. The vulnerability exists because the allocated buffer may not be sufficient to accommodate the converted UTF-8 characters, creating an opportunity for exploitation.

Impact

Exploitation of this vulnerability can cause heap corruption, leading to memory corruption and potential arbitrary code execution.

Remediation

Users can upgrade to RethinkDB version 2.4.4 or later, where this vulnerability has been addressed.