taosdata TDengine up to 3.4.1.13 SQL Parser parTokenizer.c tGetToken out-of-bounds

Summaryinfo

A vulnerability classified as critical has been found in taosdata TDengine up to 3.4.1.13. This vulnerability affects the function tGetToken of the file source/libs/parser/src/parTokenizer.c of the component SQL Parser. Performing a manipulation results in out-of-bounds. This vulnerability is identified as CVE-2026-62353. The attack can be initiated remotely. There is not any exploit available.

Detailsinfo

A vulnerability, which was classified as critical, was found in taosdata TDengine up to 3.4.1.13. This affects the function tGetToken of the file source/libs/parser/src/parTokenizer.c of the component SQL Parser. The manipulation with an unknown input leads to a out-of-bounds vulnerability. CWE is classifying the issue as CWE-125. The product reads data past the end, or before the beginning, of the intended buffer. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4.1.14, source/libs/parser/src/parTokenizer.c tGetToken() incremented past a trailing backslash in a SQL string literal such as 'abc\ and read one byte beyond the null terminator, allowing an authenticated user who can submit SQL queries to crash the server and possibly leak adjacent memory. This issue is fixed in version 3.4.1.14.

It is possible to read the advisory at github.com. This vulnerability is uniquely identified as CVE-2026-62353 since 07/13/2026. The exploitability is told to be easy. It is possible to initiate the attack remotely. Technical details of the vulnerability are known, but there is no available exploit.

Upgrading to version 3.4.1.14 eliminates this vulnerability.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• taosdata

Name

• TDengine

Version

• 3.4.1.0
• 3.4.1.1
• 3.4.1.2
• 3.4.1.3
• 3.4.1.4
• 3.4.1.5
• 3.4.1.6
• 3.4.1.7
• 3.4.1.8
• 3.4.1.9
• 3.4.1.10
• 3.4.1.11
• 3.4.1.12
• 3.4.1.13

Website

• Product: https://github.com/taosdata/TDengine/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion