CVE-2026-62353

Published: Jul 15, 2026Modified: Oct 24, 2026Deferred

5.4

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

Exploitability: 2.8 / Impact: 2.5

Source: security-advisories@github.com (Secondary)

Description

TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4.1.14, source/libs/parser/src/parTokenizer.c tGetToken() incremented past a trailing backslash in a SQL string literal such as 'abc\ and read one byte beyond the null terminator, allowing an authenticated user who can submit SQL queries to crash the server and possibly leak adjacent memory. This issue is fixed in version 3.4.1.14.

Related CWEs

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CWE-126

Buffer Over-read

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

References (2)

https://github.com/taosdata/TDengine/security/advisories/GHSA-5r9p-3j4f-gmgp

Source: security-advisories@github.com

https://github.com/taosdata/TDengine/security/advisories/GHSA-5r9p-3j4f-gmgp

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Timeline

No history available yet.