CVE-2026-41114 — Apache IoTDB JDBC driver: Large-scale Memory Exhaustion via BigDecimal toPlainString in JDBC Driver

CVE-2026-41114

Apache IoTDB JDBC driver: Large-scale Memory Exhaustion via BigDecimal toPlainString in JDBC Driver PUBLISHED

Description (CNA)

Uncontrolled Resource Consumption vulnerability in Apache IoTDB JDBC driver. This issue affects Apache IoTDB JDBC driver: from 1.3.3 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue.

Affected (CNA)

Vendor / product	Versions
Apache Software Foundation / Apache IoTDB JDBC driver	affected 1.3.3 before 2.0.11

CWE

CWE-400

References

https://lists.apache.org/thread.html/tvmqslwyqmglr19dccck1s3rxqypj4zc

ADP enrichment

CVE

No English description supplied.

http://www.openwall.com/lists/oss-security/2026/10/21/19