https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-41433.htmlhttps://patchthecve.com/cve/CVE-2024-41433.htmlWed, 17 Jun 2026 07:47:41 +0000CRITICAL 9.8: PingCAP TiDB v8.1.0 was discovered to contain a buffer overflow via the component expression.ExplainExpressionList. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. NOTE: PingCAP maintains that the actual reproduction of this issue did not cause the securithttps://patchthecve.com/cve/CVE-2024-41434.htmlhttps://patchthecve.com/cve/CVE-2024-41434.htmlWed, 17 Jun 2026 07:47:42 +0000MEDIUM 4.3: PingCAP TiDB v8.1.0 was discovered to contain a buffer overflow via the component (*Column).GetDecimal. This allows attackers to cause a Denial of Service (DoS) via a crafted input to the 'RemoveUnnecessaryFirstRow', it will check the expression between 'Agg' and 'GroupBy', but does not check the rehttps://patchthecve.com/cve/CVE-2024-35618.htmlhttps://patchthecve.com/cve/CVE-2024-35618.htmlWed, 17 Jun 2026 07:35:04 +0000HIGH 7.5: PingCAP TiDB v7.5.1 was discovered to contain a NULL pointer dereference via the component SortedRowContainer.https://patchthecve.com/cve/CVE-2024-33809.htmlhttps://patchthecve.com/cve/CVE-2024-33809.htmlWed, 17 Jun 2026 07:32:23 +0000MEDIUM 6.5: PingCAP TiDB v7.5.1 was discovered to contain a buffer overflow vulnerability, which could lead to database crashes and denial of service attacks.