CVE-2019-16535

9.8 criticalEPSS 1.7%

Critical (9.8) in clickhouse clickhouse. EPSS 1.7% chance of exploitation in the next 30 days.

In all versions of ClickHouse before 19.14, an OOB read, OOB write and integer underflow in decompression algorithms can be used to achieve RCE or DoS via native protocol.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-10-31)
CWEs: CWE-125, CWE-191, CWE-787
Published: 2019-12-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

clickhouse:clickhouse

References

https://clickhouse.yandex/docs/en/security_changelog/
https://clickhouse.yandex/docs/en/security_changelog/

Check your stack JSON