{"schema_version": "1.6.1", "id": "CVE-2026-44630", "summary": "RPC service denial of service via unchecked Thrift string length", "details": "Improper validation of length fields in the Apache IoTDB RPC service may allow a remote unauthenticated attacker to cause a denial of service. By sending a crafted malformed Thrift frame, an attacker can cause IoTDB to allocate an excessive amount of memory and crash with an OutOfMemoryError.\n\n\nThis issue affects Apache IoTDB: before 1.3.8, from 2.0.0 before 2.0.9.\n\nUsers are recommended to upgrade to version 2.0.10, which fixes the issue.", "affected": [{"ranges": [{"type": "SEMVER", "events": [{"introduced": "0"}, {"fixed": "1.3.8"}]}, {"type": "SEMVER", "events": [{"introduced": "2.0.0"}, {"fixed": "2.0.10"}]}]}], "references": [{"type": "WEB", "url": "https://lists.apache.org/thread/tfsgd9whbq79lgjvdzj44hw0fhsofly8"}]}