CVE-2026-62353 | taosdata TDengine up to 3.4.1.13 SQL Parser parTokenizer.c tGetToken out-of-bounds

July 15, 2026 Yanac

A vulnerability described as critical has been identified in taosdata TDengine up to 3.4.1.13. This affects the function tGetToken of the file source/libs/parser/src/parTokenizer.c of the component SQL Parser. Such manipulation leads to out-of-bounds read.

This vulnerability is referenced as CVE-2026-62353. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More