Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
SurrealDB versions before 2.2.2 contain a memory exhaustion vulnerability in the string::replace function that fails to restrict resulting string length when using regex patterns. An authenticated attacker can craft a malicious query to exhaust server memory through unbounded string allocations, causing denial of service.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2025-71395 Memory Exhaustion Vulnerability in SurrealDB String Replace Function Before 2.2.2 https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-71395
Post summary
This entry announces a memory exhaustion flaw in SurrealDB’s string replace function that affects versions prior to 2.2.2, without mentioning PoC, exploit tools, or fixes.
CVE-2025-71395 SurrealDB versions before 2.2.2 contain a memory exhaustion vulnerability in the string::replace function that fails to restrict resulting string length when using re… https://www.cve.org/CVERecord?id=CVE-2025-71395
Post summary
The post announces a memory exhaustion vulnerability in SurrealDB versions prior to 2.2.2, detailing how unbounded string replacement can exhaust memory.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | surrealdb | surrealdb | - | - | - |