GHSA-2vrg-7rqv-prf9LowCVSS 3.3

bytedance InfiniStore: Denial of Service via Non-Cryptographic Hashing in InfiniStore KV Map

Published
June 5, 2026
Last Modified
July 15, 2026

🔗 CVE IDs covered (1)

📋 Description

A vulnerability was found in bytedance InfiniStore up to 0.2.33. The impacted element is the function purge_kv_map in the library /src/infinistore.h of the component KV Map Handler. Performing a manipulation results in inefficient algorithmic complexity. The attack requires a local approach. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

🎯 Affected products1

  • pip/infinistore:<= 0.2.33

🔗 References (8)