Pingcap Tidb — known CVE vulnerabilities

Every CVE whose affected-product data names Pingcap Tidb, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2024-41433 — CVSS 9.8 (critical): PingCAP TiDB v8.1.0 was discovered to contain a buffer overflow via the component expression.ExplainExpressionList. This vulnerability…
• CVE-2022-3023 — CVSS 9.8 (critical): Use of Externally-Controlled Format String in GitHub repository pingcap/tidb prior to 6.4.0, 6.1.3.
• CVE-2022-31011 — CVSS 7.8 (high): TiDB is an open-source NewSQL database that supports Hybrid Transactional and Analytical Processing (HTAP) workloads. Under certain…
• CVE-2022-34969 — CVSS 7.5 (high): PingCAP TiDB v6.1.0 was discovered to contain a NULL pointer dereference.
• CVE-2024-35618 — CVSS 7.5 (high): PingCAP TiDB v7.5.1 was discovered to contain a NULL pointer dereference via the component SortedRowContainer.
• CVE-2024-33809 — CVSS 6.5 (medium): PingCAP TiDB v7.5.1 was discovered to contain a buffer overflow vulnerability, which could lead to database crashes and denial of service…
• CVE-2024-41434 — CVSS 4.3 (medium): PingCAP TiDB v8.1.0 was discovered to contain a buffer overflow via the component (*Column).GetDecimal. This allows attackers to cause a…