CVE-2026-62351

Published: Jul 15, 2026Modified: Oct 24, 2026Deferred

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: security-advisories@github.com (Secondary)

Description

TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4.1.15, source/libs/transport/src/transComm.c transDecompressMsg() read STransCompMsg.contLen when pHead->comp == 1 without first validating that the RPC packet contained the 8-byte STransCompMsg structure, causing an unauthenticated out-of-bounds read, uncontrolled allocation, integer underflow, and server crash. This issue is fixed in version 3.4.1.15.

Related CWEs

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (2)

https://github.com/taosdata/TDengine/security/advisories/GHSA-8pc4-p252-f5m7

Source: security-advisories@github.com

https://github.com/taosdata/TDengine/security/advisories/GHSA-8pc4-p252-f5m7

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Timeline

No history available yet.