What’s Vulnerable › Vulnerabilities

CVE-2024-37820

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-06-25 · updated 2026-06-17
• Weakness: CWE-476

Description

A nil pointer dereference in PingCAP TiDB v8.2.0-alpha-216-gfe5858b allows attackers to crash the application via expression.inferCollation.

References

• https://gist.github.com/ycybfhb/a9c1e14ce281f2f553adca84d384b761
• https://github.com/pingcap/tidb/issues/53580
• https://gist.github.com/ycybfhb/a9c1e14ce281f2f553adca84d384b761
• https://github.com/pingcap/tidb/issues/53580

Get alerted when CVE-2024-37820 or the next vulnerability affects your stack