← All advisories

Medium severity5.4GHSA Advisory· Published Jun 25, 2024· Updated Jun 17, 2026

CVE-2024-37820

CVE-2024-37820

Description

A nil pointer dereference in PingCAP TiDB v8.2.0-alpha-216-gfe5858b allows attackers to crash the application via expression.inferCollation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
github.com/pingcap/tidbGo	< 8.2.0	8.2.0

Affected products

5

Pingcap/TidbGHSA
Range: < 8.2.0
ghsa-coords4 versions
pkg:golang/github.com/pingcap/tidb pkg:apk/chainguard/peerdb-flow-compat pkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE%20Tumbleweed pkg:apk/chainguard/peerdb-flow
< 8.2.0+ 3 more
- (no CPE)range: < 8.2.0
- (no CPE)range: < 0.35.0-r0
- (no CPE)range: < 0.0.20241209T183251-1.1
- (no CPE)range: < 0

Patches

Vulnerability mechanics

References

5

github.com/advisories/GHSA-9g6g-xqv5-8g5wghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2024-37820ghsaADVISORY
gist.github.com/ycybfhb/a9c1e14ce281f2f553adca84d384b761nvdWEB
github.com/pingcap/tidb/commit/3d68bd21240c610c6307713e2bd54a5e71c32608ghsaWEB
github.com/pingcap/tidb/issues/53580nvdWEB

News mentions

0

No linked articles in our index yet.