Description
A vulnerability was detected in TrailDB 0.6. Impacted is the function tdb_open of the file /src/tdb.c of the component TOC Validation. The manipulation results in out-of-bounds read. It is possible to launch the attack remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-08-16
Score: 5.1 Medium
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability is an out‑of‑bounds read triggered during TOC validation in the tdb_open function of TrailDB 0.6. A crafted input can cause the function to read memory beyond the intended buffer, potentially allowing a remote attacker to read sensitive data or corrupt program state. The flaw is categorized as CWE‑119 and CWE‑125.

Affected Systems

The only explicitly affected product is TrailDB version 0.6. No other versions or derivatives are listed as impacted.

Risk and Exploitability

The CVSS score of 5.1 is considered medium severity. EPSS information is not available, and the vulnerability is not listed in the CISA KEV catalog, but the public nature of the exploit and the ability to launch the attack remotely indicate a measurable risk to systems using the vulnerable library.

Generated by OpenCVE AI on August 16, 2026 at 21:20 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade TrailDB to a patched release once it becomes available.
  • Restrict the use of tdb_open so that only trusted, local processes can invoke it, or run the library within a hardened container that limits network exposure.
  • If the workflow permits, disable TOC validation or implement custom bounds checking before calling tdb_open to mitigate the risk.

Generated by OpenCVE AI on August 16, 2026 at 21:20 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sun, 16 Aug 2026 20:15:00 +0000

Type Values Removed Values Added
Description A vulnerability was detected in TrailDB 0.6. Impacted is the function tdb_open of the file /src/tdb.c of the component TOC Validation. The manipulation results in out-of-bounds read. It is possible to launch the attack remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Title TrailDB TOC Validation tdb.c tdb_open out-of-bounds
First Time appeared Traildb
Traildb traildb
Weaknesses CWE-119
CWE-125
CPEs cpe:2.3:a:traildb:traildb:*:*:*:*:*:*:*:*
Vendors & Products Traildb
Traildb traildb
References
Metrics cvssV2_0

{'score': 4, 'vector': 'AV:N/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 3.5, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 3.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 5.1, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Traildb Traildb
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-08-16T20:00:11.156Z

Reserved: 2026-08-16T05:55:25.488Z

Link: CVE-2026-19955

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-16T20:16:25.707

Modified: 2026-08-16T20:16:25.707

Link: CVE-2026-19955

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-16T21:30:16Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer

  • CWE-125

    Out-of-bounds Read