Lucene search
+L

8 matches found

NVD
NVD
•added 2026/07/15 7:18 p.m.•32 views

CVE-2026-62353

TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4.1.14, source/libs/parser/src/parTokenizer.c tGetToken incremented past a trailing backslash in a SQL string literal such as 'abc\ and read one byte beyond the null terminator, allowing an authenticated user...

5.4CVSS0.00333EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/07/15 7:08 p.m.•15 views

CVE-2026-62353 TDengine: Authenticated Out-of-Bounds Read in SQL Lexer tGetToken

TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4.1.14, source/libs/parser/src/parTokenizer.c tGetToken incremented past a trailing backslash in a SQL string literal such as 'abc\ and read one byte beyond the null terminator, allowing an authenticated user...

5.4CVSS5.7AI score0.00333EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/15 7:08 p.m.•39 views

CVE-2026-62353 TDengine: Authenticated Out-of-Bounds Read in SQL Lexer tGetToken

TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4.1.14, source/libs/parser/src/parTokenizer.c tGetToken incremented past a trailing backslash in a SQL string literal such as 'abc\ and read one byte beyond the null terminator, allowing an authenticated user...

5.4CVSS0.00333EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/15 12:00 a.m.•2 views

CVE-2026-62353: Out-of-bounds Read

TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4.1.14, source/libs/parser/src/parTokenizer.c tGetToken incremented past a trailing backslash in a SQL string literal such as 'abc\ and read one byte beyond the null terminator, allowing an authenticated user...

5.4CVSS5.6AI score0.00333EPSS
SaveExploits0References3
OSS-Fuzz
OSS-Fuzz
•added 2026/05/14 8:19 a.m.•12 views

tdengine:sql-fuzzer: Global-buffer-overflow in tGetToken

Detailed Report: https://oss-fuzz.com/testcase?key=4570542010335232 Project: tdengine Fuzzing Engine: libFuzzer Fuzz Target: sql-fuzzer Job Type: libfuzzerasantdengine Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x593d27421655 Crash State: tGetToken...

5.4AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2026/04/18 9:44 a.m.•10 views

tdengine:sql-fuzzer: Global-buffer-overflow in tGetToken

Detailed Report: https://oss-fuzz.com/testcase?key=4807015468957696 Project: tdengine Fuzzing Engine: afl Fuzz Target: sql-fuzzer Job Type: aflasantdengine Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x563c8298c4e8 Crash State: tGetToken parse qParseSqlSyntax...

5.4AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2021/12/25 10:50 a.m.•9 views

tdengine:sql-fuzzer: Global-buffer-overflow in tGetToken

Project: https://github.com/taosdata/TDengine.git Detailed Report: https://oss-fuzz.com/testcase?key=4782418890981376 Project: tdengine Fuzzing Engine: afl Fuzz Target: sql-fuzzer Job Type: aflasantdengine Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x0000007c8abc...

5.4AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2021/08/29 8:00 a.m.•8 views

tdengine:sql-fuzzer: Heap-buffer-overflow in tGetToken

Project: https://github.com/taosdata/TDengine.git Detailed Report: https://oss-fuzz.com/testcase?key=4651517664165888 Project: tdengine Fuzzing Engine: afl Fuzz Target: sql-fuzzer Job Type: aflasantdengine Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x609000041bd3...

5.4AI score
SaveExploits0
Rows per page
Query Builder