Beveiligingsadvies

CVE-2026-62349

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-15 18:55:07

Laatst bijgewerkt 2026-07-15 19:37:03

Toegewezen door GitHub_M

CVSS-score 8.3

Status PUBLISHED

Beschrijving

TDengine is an open source, time-series database optimized for Internet of Things devices. In 3.4.1.6 and earlier, source/libs/parser/src/parUtil.c trimString() checks space for only one byte before processing SQL string escape sequences \%, \_, or \x, allowing a one-byte out-of-bounds write to the stack buffer tmpTokenBuf that can cause denial of service and potentially remote code execution. This issue is fixed in version 3.4.1.14.

← Alle CVE's bekijken Bekijk op cve.org ↗