CVE-2026-40454

Name of the Vulnerable Software and Affected Versions Apache IoTDB C++ client versions 1.3.5 through 1.3.7 Apache IoTDB C++ client versions 2.0.5 through 2.0.9

Description An out-of-bounds read and improper input validation issue exists in the TsBlock deserializer. This occurs when the client processes malformed data sent by the server, which can lead to a crash of the client process.

Recommendations Upgrade Apache IoTDB C++ client versions 1.3.5 through 1.3.7 to version 1.3.8. Upgrade Apache IoTDB C++ client versions 2.0.5 through 2.0.9 to version 2.0.10.