CVE-2024-41436

Description

ClickHouse v24.3.3.102 was discovered to contain a buffer overflow via the component DB::evaluateConstantExpressionImpl.

Affected Platforms

Weakness Type

CWE-120

References

• https://gist.github.com/ycybfhb/db127ae9d105a4d20edc9f010a959016
• https://github.com/ClickHouse/ClickHouse/issues/65520