Skip to content
OpenAdvisories
High · 7.5 CVE-2026-41114 EUVD-2026-107163GHSA-f58p-264f-4j63

Apache IoTDB JDBC driver: Large-scale Memory Exhaustion via BigDecimal toPlainString in JDBC Driver

Published Oct 21, 2026 · Updated Oct 30, 2026 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache IoTDB JDBC driver

Description

Uncontrolled Resource Consumption vulnerability in Apache IoTDB JDBC driver.

This issue affects Apache IoTDB JDBC driver: from 1.3.3 before 2.0.11.

Users are recommended to upgrade to version 2.0.11, which fixes the issue.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache IoTDB JDBC driver 1.3.3 – < 2.0.11 2.0.11

References