CVE-2026-62353
TDengine: Authenticated Out-of-Bounds Read in SQL Lexer tGetToken
CVSS Score
5.4
EPSS Score
0.0%
EPSS Percentile
0th
TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4.1.14, source/libs/parser/src/parTokenizer.c tGetToken() incremented past a trailing backslash in a SQL string literal such as 'abc\ and read one byte beyond the null terminator, allowing an authenticated user who can submit SQL queries to crash the server and possibly leak adjacent memory. This issue is fixed in version 3.4.1.14.
| CWE | CWE-125 CWE-126 |
| Vendor | taosdata |
| Product | tdengine |
| Published | Jul 15, 2026 |
| Last Updated | Jul 15, 2026 |
Stay Ahead of the Next One
Get instant alerts for taosdata tdengine
Be the first to know when new medium vulnerabilities affecting taosdata tdengine are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
Low
Affected Versions
taosdata / TDengine
< 3.4.1.14