RethinkDB Buffer Overflow Vulnerability in cJSON Module

A classic buffer overflow vulnerability has been identified in RethinkDB versions through 2.4.4. This issue resides in the cJSON module, specifically within the string parsing function, which improperly handles UTF-16 surrogate pairs. The vulnerability can lead to memory corruption and potentially allow arbitrary code execution.

Impact

Exploitation of this vulnerability causes a buffer overflow in the cJSON string parsing function, leading to memory corruption and the possibility of arbitrary code execution.

Remediation

Users can upgrade to the latest version of RethinkDB, where this vulnerability has been fixed.