CVE-2026-22185: OpenLDAP LMDB mdb_load Heap Buffer Underflow in readline()
OpenLDAP Lightning Memory-Mapped Database (LMDB) versions up to and including 0.9.14, prior to commit 8e1fda8, contain a heap buffer underflow in the readline() function of mdbload. When processing malformed input containing an embedded NUL byte, an unsigned offset calculation can underflow and cause an out-of-bounds read of one byte before the allocated heap buffer. This can cause mdbload to crash, leading to a limited denial-of-service condition.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-22185?
CVE-2026-22185 is classified as a medium severity vulnerability due to its potential impact on systems using the affected OpenLDAP version.
How do I fix CVE-2026-22185?
To mitigate CVE-2026-22185, upgrade OpenLDAP to version 2.6.11 or later where the vulnerability has been addressed.
What specific function is affected in CVE-2026-22185?
The vulnerability in CVE-2026-22185 specifically affects the readline() function in the LMDB component of OpenLDAP.
What types of attacks can exploit CVE-2026-22185?
CVE-2026-22185 can be exploited through the processing of malformed input that triggers the heap buffer underflow.
Which versions of OpenLDAP are affected by CVE-2026-22185?
OpenLDAP versions up to and including 2.6.10 are affected by CVE-2026-22185.