CVE-2026-41114: Apache IoTDB JDBC driver: Large-scale Memory Exhaustion via BigDecimal toPlainString in JDBC Driver

Posted by Haonan Hou on Oct 21 Severity: low Affected versions: - Apache IoTDB JDBC driver (org.apache.iotdb:iotdb-jdbc) 1.3.3 before 2.0.11 Description: Uncontrolled Resource Consumption vulnerability in Apache IoTDB JDBC driver. This issue affects Apache IoTDB JDBC driver: from 1.3.3 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue. Credit: Ho1aAs (GitHub: @HolaAsuka) (finder) movonow (GitHub: @movonow) (finder) zhid889773...

Published 21-Oct-2026 17:00 UTC · First seen 21-Oct-2026 16:59 UTC

Sources

• Open Source Security · 21-Oct-2026