CVE-2024-41433

PingCAP TiDB v8.1.0 was discovered to contain a buffer overflow via the component expression.ExplainExpressionList. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. NOTE: PingCAP maintains that the actual reproduction of this issue did not cause the security impact of service interruption to other users. They argue that this is a complex query bug and not a DoS vulnerability.

• CWE-120

• https://gist.github.com/ycybfhb/eec3a1eefe4c85eb22f1bca6114359a1Third Party Advisory
• https://github.com/pingcap/tidb/issues/53796Exploit, Issue Tracking

Published

Sep 3, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-4139Manage Bank Statement ReProcessing Rules does not perform ne…4.3
• CVE-2024-4140An excessive memory use issue (CWE-770) exists in Email-MIME…7.5
• CVE-2024-4141Out-of-bounds array write in Xpdf 4.05 and earlier, triggere…5.5
• CVE-2024-4142An Improper input validation vulnerability that could potent…9
• CVE-2024-4143A potential security vulnerability has been identified in ce…9.8
• CVE-2024-41432An IP Spoofing vulnerability has been discovered in Likeshop…5.3
• CVE-2024-41434PingCAP TiDB v8.1.0 was discovered to contain a buffer overf…4.3
• CVE-2024-41435YugabyteDB v2.21.1.0 was discovered to contain a buffer over…7.5
• CVE-2024-41436ClickHouse v24.3.3.102 was discovered to contain a buffer ov…7.5
• CVE-2024-41437A heap buffer overflow in the function cp_unfilter() (/vendo…5.5
• CVE-2024-41438A heap buffer overflow in the function cp_stored() (/vendor/…6.2
• CVE-2024-41439A heap buffer overflow in the function cp_block() (/vendor/c…5.5