CVE-2026-11312
LowCVSS 3.3Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
A vulnerability in bytedance InfiniStore up to version 0.2.33. The purge_kv_map function in the /src/infinistore.h library (KV Map Handler component) causes inefficient algorithmic complexity. The attack requires local access. The exploit has been published.
Risk Assessment
An attacker could cause excessive CPU or memory resource consumption, leading to slowdown or denial of service in systems using InfiniStore.
Recommendation
It is recommended to avoid using this library in production environments or apply temporary mitigations such as limiting input data size.
Original NVD description (English source)
A vulnerability was found in bytedance InfiniStore up to 0.2.33. The impacted element is the function purge_kv_map in the library /src/infinistore.h of the component KV Map Handler. Performing a manipulation results in inefficient algorithmic complexity. The attack requires a local approach. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.