YDB Platform Memory Leak Vulnerability in YAJL Module

A memory leak vulnerability has been identified in the YDB platform, specifically in versions through 24.4.4.2, within the YAJL module. The issue arises from the YAJL tree parsing function, which was cloned from a different repository but did not receive an essential security update. This vulnerability leads to a missing release of memory after the effective lifetime of the data has passed, potentially allowing for increased memory usage over time.

Impact

Exploitation of this vulnerability causes a memory leak, where allocated memory is not properly released, leading to increased memory consumption that could degrade performance or cause the application to run out of memory.

Remediation

Users can update to the latest version of the YDB platform, where this vulnerability has been addressed, to mitigate this issue.