Out-of-bounds Read Vulnerability in TimescaleDB by Timescale

CVE-2026-70633

What is CVE-2026-70633?

TimescaleDB versions up to 2.29.1 are susceptible to an out-of-bounds read vulnerability in the Gorilla compression reverse row iterator. This flaw enables authenticated attackers to trigger a denial of service by crafting a specific compressed datum with an inconsistent BitArray. When a compromise occurs, the reverse iterator can lead to an unsigned integer wraparound in the index computation, resulting in the potential for reading beyond the allocated memory bounds. This issue can cause a SIGSEGV crash, which can be repeatedly exploited during reverse-order scans of affected compressed hypertables.

References