CVE-2026-40454

The Apache IoTDB C++ client is vulnerable to an Out-of-bounds Read and Improper Input Validation vulnerability. The flaw exists in the TsBlock deserializer , where malformed server data can cause the client process to crash. This issue affects versions 1.3.5 before 1.3.8 and 2.0.5 before 2.0.10 ....