PT-2026-60267 · Tdengine · Tdengine

CVE-2026-62351 · Published 2026-07-15 · Updated 2026-07-16

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions TDengine versions prior to 3.4.1.15

Description An unauthenticated out-of-bounds read, uncontrolled allocation, and integer underflow can occur when the server processes malformed RPC packets. This happens because the transDecompressMsg() function in source/libs/transport/src/transComm.c reads the STransCompMsg.contLen value when pHead->comp is set to 1 without first validating that the packet contains the required 8-byte STransCompMsg structure, leading to a server crash.

Recommendations Update to version 3.4.1.15.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2026-62351

Affected Products

Tdengine

References · 3

• 🔥 https://github.com/taosdata/TDengine/security/advisories/GHSA-8pc4-p252-f5m7 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-62351 · Security Note
• https://twitter.com/HugoValters/status/2077889010996023324 · Twitter Post