PT-2026-46877 · Bytedance · Infinistore

Dem00 · Published 2026-06-05 · Updated 2026-06-05 · CVE-2026-11312

NVD

CVSS v2.0

1.7

Low

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:P

A vulnerability was found in bytedance InfiniStore up to 0.2.33. The impacted element is the function purge kv map in the library /src/infinistore.h of the component KV Map Handler. Performing a manipulation results in inefficient algorithmic complexity. The attack requires a local approach. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

Exploit

Fix

Improper Resource Release

Weakness Enumeration

CWE-407

CWE-404

Related Identifiers

CVE-2026-11312

Affected Products

Infinistore

References · 7

• 🔥 https://github.com/bytedance/InfiniStore/issues/200 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-11312 · Security Note
• https://vuldb.com/vuln/368398 · Note
• https://vuldb.com/cve/CVE-2026-11312 · Note
• https://github.com/bytedance/InfiniStore · Note
• https://vuldb.com/vuln/368398/cti · Note
• https://vuldb.com/submit/832348 · Note