Tarantool: Heap-buffer-overflow in lj_record_idx

The vulnerability is a heap-buffer-overflow in the lj_record_idx function of Tarantool, discovered through OSS-Fuzz testing. The crash involves an 8-byte write beyond the allocated heap buffer, which can lead to memory corruption. The affected versions are explicitly listed and include several 3.7.x, 3.8.x, and 3.9.0-entrypoint releases. There is no vendor advisory or patch information available in the provided data, and no known active exploitation has been reported.

Heap-buffer-overflow vulnerabilities can cause memory corruption, potentially leading to application crashes or undefined behavior. Without further details or exploitation reports, the exact impact on confidentiality, integrity, or availability cannot be determined from the provided information.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider avoiding the affected versions or applying any available workarounds from the vendor.