CVE-2026-62353

{
  "id": "CVE-2026-62353",
  "sourceIdentifier": "[email protected]",
  "published": "2026-07-15T19:18:38.073",
  "lastModified": "2026-10-24T21:10:00.130",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4.1.14, source/libs/parser/src/parTokenizer.c tGetToken() incremented past a trailing backslash in a SQL string literal such as 'abc\\ and read one byte beyond the null terminator, allowing an authenticated user who can submit SQL queries to crash the server and possibly leak adjacent memory. This issue is fixed in version 3.4.1.14."
    },
    {
      "lang": "es",
      "value": "TDengine es una base de datos de series temporales optimizada para dispositivos de internet de las cosas. Antes de la versión 3.4.1.14, source/libs/parser/src/parTokenizer.c tGetToken() incrementaba más allá de una barra invertida final en un literal de cadena SQL como ’abc\\’ y leía un byte más allá del terminador nulo, permitiendo a un usuario autenticado que puede enviar consultas SQL bloquear el servidor y posiblemente filtrar memoria adyacente. Este problema está solucionado en la versión 3.4.1.14."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "taosdata",
          "product": "TDengine",
          "versions": [
            {
              "version": "< 3.4.1.14",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
          "baseScore": 5.4,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "availabilityImpact": "LOW"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 2.5
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-07-15T19:28:48.516815Z",
          "id": "CVE-2026-62353",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-125"
        },
        {
          "lang": "en",
          "value": "CWE-126"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/taosdata/TDengine/security/advisories/GHSA-5r9p-3j4f-gmgp",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/taosdata/TDengine/security/advisories/GHSA-5r9p-3j4f-gmgp",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ]
}