Out-of-Bounds Read in TimescaleDB Leading to Potential Data Exposure

CVE-2026-70634

What is CVE-2026-70634?

The TimescaleDB product, up to version 2.29.1, is susceptible to an out-of-bounds read vulnerability within the Dictionary compression reverse row iterator. This flaw arises from a lack of validation on the read offset, which can be manipulated by an attacker with DML access to a physically compressed relation. By crafting a malicious datum and executing a reverse-order scan, the attacker can retrieve back-end memory data, including sensitive information from the shared buffer pool. This vulnerability bypasses the usual SQL access control measures, potentially exposing confidential data to unauthorized users.

References