Timescale TimescaleDB up to 2.29.1 Gorilla Compression Reverse Row Iterator out-of-bounds

Summaryinfo

A vulnerability, which was classified as critical, has been found in Timescale TimescaleDB up to 2.29.1. The impacted element is an unknown function of the component Gorilla Compression Reverse Row Iterator. Performing a manipulation results in out-of-bounds. This vulnerability is reported as CVE-2026-70633. The attack is possible to be carried out remotely. No exploit exists.

Detailsinfo

A vulnerability, which was classified as critical, was found in Timescale TimescaleDB up to 2.29.1. This affects an unknown functionality of the component Gorilla Compression Reverse Row Iterator. The manipulation with an unknown input leads to a out-of-bounds vulnerability. CWE is classifying the issue as CWE-125. The product reads data past the end, or before the beginning, of the intended buffer. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability in the Gorilla compression reverse row iterator that allows authenticated attackers to cause a denial of service by storing a crafted compressed datum with an internally inconsistent BitArray. Attackers with DML access to a compressed hypertable can trigger an unsigned integer wraparound in the reverse iterator bucket index computation, causing a read beyond the end of the bucket array, resulting in a SIGSEGV crash that can be repeatedly triggered on each subsequent reverse-order scan.

The advisory is shared at github.com. This vulnerability is uniquely identified as CVE-2026-70633 since 08/04/2026. The exploitability is told to be easy. It is possible to initiate the attack remotely. Neither technical details nor an exploit are publicly available.

Applying the patch 517c13e7cc6afa4a7deaa7a5a5a29065e5b5a3 is able to eliminate this problem.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• Timescale

Name

• TimescaleDB

Version

• 2.29.0
• 2.29.1

Website

• Product: https://github.com/timescale/timescaledb/

CPE 2.3info

• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion