CVE-2026-11312

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-11312
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-11312.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-11312
Aliases
Published
2026-06-05T00:30:14Z
Modified
2026-08-12T03:51:22Z
Severity
  • 1.9 (Low) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
bytedance InfiniStore KV Map infinistore.h purge_kv_map algorithmic complexity
Details

A vulnerability was found in bytedance InfiniStore up to 0.2.33. The impacted element is the function purge_kv_map in the library /src/infinistore.h of the component KV Map Handler. Performing a manipulation results in inefficient algorithmic complexity. The attack requires a local approach. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

Database specific 
{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-404",
        "CWE-407"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/11xxx/CVE-2026-11312.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "0.2.0"
                },
                {
                    "last_affected": "0.2.0"
                },
                {
                    "introduced": "0.2.1"
                },
                {
                    "last_affected": "0.2.1"
                },
                {
                    "introduced": "0.2.2"
                },
                {
                    "last_affected": "0.2.2"
                },
                {
                    "introduced": "0.2.4"
                },
                {
                    "last_affected": "0.2.4"
                },
                {
                    "introduced": "0.2.5"
                },
                {
                    "last_affected": "0.2.5"
                },
                {
                    "introduced": "0.2.6"
                },
                {
                    "last_affected": "0.2.6"
                },
                {
                    "introduced": "0.2.7"
                },
                {
                    "last_affected": "0.2.7"
                },
                {
                    "introduced": "0.2.8"
                },
                {
                    "last_affected": "0.2.8"
                },
                {
                    "introduced": "0.2.9"
                },
                {
                    "last_affected": "0.2.9"
                },
                {
                    "introduced": "0.2.10"
                },
                {
                    "last_affected": "0.2.10"
                },
                {
                    "introduced": "0.2.11"
                },
                {
                    "last_affected": "0.2.11"
                },
                {
                    "introduced": "0.2.12"
                },
                {
                    "last_affected": "0.2.12"
                },
                {
                    "introduced": "0.2.13"
                },
                {
                    "last_affected": "0.2.13"
                },
                {
                    "introduced": "0.2.14"
                },
                {
                    "last_affected": "0.2.14"
                },
                {
                    "introduced": "0.2.15"
                },
                {
                    "last_affected": "0.2.15"
                },
                {
                    "introduced": "0.2.16"
                },
                {
                    "last_affected": "0.2.16"
                },
                {
                    "introduced": "0.2.17"
                },
                {
                    "last_affected": "0.2.17"
                },
                {
                    "introduced": "0.2.18"
                },
                {
                    "last_affected": "0.2.18"
                },
                {
                    "introduced": "0.2.19"
                },
                {
                    "last_affected": "0.2.19"
                },
                {
                    "introduced": "0.2.20"
                },
                {
                    "last_affected": "0.2.20"
                },
                {
                    "introduced": "0.2.21"
                },
                {
                    "last_affected": "0.2.21"
                },
                {
                    "introduced": "0.2.22"
                },
                {
                    "last_affected": "0.2.22"
                },
                {
                    "introduced": "0.2.23"
                },
                {
                    "last_affected": "0.2.23"
                },
                {
                    "introduced": "0.2.24"
                },
                {
                    "last_affected": "0.2.24"
                },
                {
                    "introduced": "0.2.25"
                },
                {
                    "last_affected": "0.2.25"
                },
                {
                    "introduced": "0.2.26"
                },
                {
                    "last_affected": "0.2.26"
                },
                {
                    "introduced": "0.2.27"
                },
                {
                    "last_affected": "0.2.27"
                },
                {
                    "introduced": "0.2.28"
                },
                {
                    "last_affected": "0.2.28"
                },
                {
                    "introduced": "0.2.29"
                },
                {
                    "last_affected": "0.2.29"
                },
                {
                    "introduced": "0.2.30"
                },
                {
                    "last_affected": "0.2.30"
                },
                {
                    "introduced": "0.2.31"
                },
                {
                    "last_affected": "0.2.31"
                },
                {
                    "introduced": "0.2.32"
                },
                {
                    "last_affected": "0.2.32"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}
References

Affected packages

Git / github.com/bytedance/infinistore

Affected ranges

Type
GIT
Repo
https://github.com/bytedance/infinistore
Events
Introduced
ad6fa2ec358eec4cfb6e09a04ee32e05d05c7d9c
Last Affected
ad6fa2ec358eec4cfb6e09a04ee32e05d05c7d9c
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "0.2.3"
        },
        {
            "last_affected": "0.2.3"
        },
        {
            "introduced": "0.2.33"
        },
        {
            "last_affected": "0.2.33"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

0.*
0.2.3
0.2.33

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-11312.json"