TrailDB CVE-2026-19955

Q: What is the CVSS score of CVE-2026-19955?

CVE-2026-19955 has a CVSS 4.0 base score of 2.0 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.3%.

EUVD-2026-59991 LOW

Buffer Overflow (CWE-119)

2026-08-16 cna@vuldb.com

GHSA-3r54-xjq4-jwjm

Buffer Overflow

2.0

CVSS 4.0 · Vendor: vuldb

Severity by source

Vendor (vuldb) PRIMARY

2.0 LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

3.5 LOW

Network-reachable but requires low-privilege user to open a crafted file (PR:L, UI:R); impact is application-level availability only, no data exposure (C:N/I:N, A:L).

3.1 AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L

4.0 AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Primary rating from Vendor (vuldb).

CVSS VectorVendor: vuldb

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

Scope

Lifecycle Timeline

Analysis Generated

Aug 16, 2026 - 20:30 vuln.today

DescriptionCVE.org

A vulnerability was detected in TrailDB 0.6. Impacted is the function tdb_open of the file /src/tdb.c of the component TOC Validation. The manipulation results in out-of-bounds read. It is possible to launch the attack remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

AnalysisAI

Out-of-bounds read in TrailDB 0.6 allows a remote attacker with low privileges to crash an application processing a crafted TrailDB file. The vulnerable code path is the TOC (Table of Contents) validation logic inside tdb_open() in /src/tdb.c, triggered when a maliciously formed TrailDB file is opened. Publicly available exploit code exists (CVSS 4.0 E:P); no KEV listing and no patch - the project has not responded to the coordinated disclosure filed via GitHub issue #149.

Technical ContextAI

TrailDB is a compact, open-source binary format and C library for storing and querying append-only event streams, primarily used for analytics workloads. The tdb_open() function in /src/tdb.c is responsible for parsing the file header and TOC structure that maps internal data segments. CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) covers the root cause here: during TOC validation, attacker-controlled field values in the file header can cause the parser to read memory beyond the allocated buffer. Because the library is written in C with no bounds-safe abstractions, a malformed TOC entry can redirect a read pointer outside valid memory. The CVSS 4.0 vector confirms no confidentiality or integrity impact (VC:N/VI:N), consistent with a read-only memory safety bug that primarily risks a process crash rather than code execution.

RemediationAI

No vendor-released patch identified at time of analysis. The project was notified through GitHub issue #149 (https://github.com/traildb/traildb/issues/149) but has not responded, and no fixed release is available. The primary compensating control is to reject untrusted or externally sourced TrailDB files before passing them to tdb_open(), since the vulnerability is triggered at file-open time during TOC parsing - this eliminates the attack surface at the cost of restricting data ingestion from external parties. Applications that must process untrusted TrailDB files should sandbox the parsing process (e.g., run tdb_open in a subprocess with limited privileges and OS-level memory isolation such as seccomp) to contain a crash and prevent exploitation of any future escalation. Organizations should monitor the GitHub repository for any upstream patch and update promptly when one is released.