CVE-2026-19955
Received Received - Intake

Out-of-Bounds Read in TrailDB TOC Validation

Vulnerability report for CVE-2026-19955, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-08-16

Last updated on: 2026-08-16

Assigner: VulDB

Description

A vulnerability was detected in TrailDB 0.6. Impacted is the function tdb_open of the file /src/tdb.c of the component TOC Validation. The manipulation results in out-of-bounds read. It is possible to launch the attack remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-16
Last Modified
2026-08-16
Generated
2026-08-17
AI Q&A
2026-08-16
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
traildb traildb 0.6

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.
CWE-119 The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an out-of-bounds read flaw in TrailDB version 0.6. It occurs in the tdb_open function of the file /src/tdb.c during TOC validation. The issue arises because the function maps trails.toc and trails.data files into memory without validating offsets in trails.toc against the actual size of trails.data. Attackers can exploit this by crafting malformed TrailDB files with large offsets in trails.toc while keeping trails.data small, causing pointers to access invalid memory regions.

Detection Guidance

To detect this vulnerability, inspect TrailDB files for malformed trails.toc entries. Check if offsets in trails.toc exceed trails.data size or are non-monotonic. Use tools like 'tdb dump' on suspicious files to trigger crashes if the vulnerability is present.

Impact Analysis

This vulnerability can cause denial of service in applications or services that process untrusted TrailDB files. It may lead to crashes in tools like tdb dump and traildb_bench dump due to segmentation faults. Since the exploit is public, attackers could remotely trigger crashes by providing specially crafted files.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR or HIPAA as it is an out-of-bounds read issue in TrailDB's file handling. However, if exploited, it could lead to denial of service in applications processing untrusted TrailDB files, potentially disrupting systems handling sensitive data subject to these regulations.

Mitigation Strategies

Avoid processing untrusted TrailDB files until a patch is released. If processing is necessary, validate trails.toc offsets and file structure before use. Monitor TrailDB's GitHub repository for updates and apply patches immediately when available.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-19955. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart