CVE-2026-62351

Deferred Deferred - Pending Action

TDengine Time-Series Database Memory Corruption Vulnerability

Publication date: 2026-07-15

Last updated on: 2026-07-15

Assigner: GitHub, Inc.

Description

TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4.1.15, source/libs/transport/src/transComm.c transDecompressMsg() read STransCompMsg.contLen when pHead->comp == 1 without first validating that the RPC packet contained the 8-byte STransCompMsg structure, causing an unauthenticated out-of-bounds read, uncontrolled allocation, integer underflow, and server crash. This issue is fixed in version 3.4.1.15.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-15

Last Modified

2026-07-15

Generated

2026-08-06

AI Q&A

2026-07-16

EPSS Evaluated

2026-08-04

NVD

CVE-2026-62351

EUVD

EUVD-2026-44770

Affected Vendors & Products

Vendor	Product	Version / Range
taosdata	tdengine	3.4.1.15
taosdata	tdengine	to 3.4.1.6 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

CVE-2026-62351 is an unauthenticated remote denial of service vulnerability in TDengine versions 3.4.1.6 and earlier. It occurs in the transDecompressMsg() function when processing RPC packets with compression enabled. The function reads a length field without validating the packet contains enough data, causing an out-of-bounds read that leads to memory allocation issues, integer underflow, and server crashes.

Detection Guidance

To detect this vulnerability, monitor TDengine server logs for crashes or unusual activity on port 6030. Check for repeated server restarts or out-of-memory errors. Use network scanning tools like nmap to identify TDengine instances running vulnerable versions (3.4.1.6 or earlier).

Commands: nmap -p 6030 -sV <target_IP> to scan for TDengine. Check server logs for segmentation faults or memory allocation errors. Verify version with taos -v or grep version in TDengine installation directory.

Impact Analysis

An attacker can exploit this by sending specially crafted packets to port 6030, repeatedly crashing the TDengine server. This results in a complete denial of service, making the database unavailable for legitimate users and disrupting time-series data operations.

Compliance Impact

This vulnerability can impact compliance by causing prolonged downtime of critical data systems. GDPR requires timely data access, while HIPAA mandates availability of health records. Server crashes may lead to violations if data becomes inaccessible during outages.

Mitigation Strategies

Immediately upgrade TDengine to version 3.4.1.15 or later. Block external access to port 6030 using firewalls until the upgrade is complete. Monitor network traffic for suspicious packets targeting this port.

Hi! I’m here to help you understand CVE-2026-62351. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70