AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

tidbGHSA-9g6g-xqv5-8g5w

PingCAP TiDB nil pointer dereference

tidb

CVE-2024-37820 · Published Jun 25, 2024 · updated Sep 10, 2026

Medium5.4
Fix: upgrade to 8.2.0 or later
GitHub advisory

A nil pointer dereference in PingCAP TiDB v8.2.0-alpha-216-gfe5858b allows attackers to crash the application via expression.inferCollation.

Affected versions

PackageAffectedFixed in
github.com/pingcap/tidb
Go
< 8.2.08.2.0
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Severity from
GitHub (reviewed advisory)
Weakness
CWE-476
Also known as
CVE-2024-37820, GO-2024-3284

More tidb advisories

All tidb
Critical 9.8Nov 4, 2022TiDB vulnerable to Use of Externally-Controlled Format StringCVE-2022-3023no fix yetHigh 7.8Jun 6, 2022TiDB authentication bypass vulnerabilityCVE-2022-31011fixed in 0.0.0-20220221072141-27ffd1126da1 +2