Intel

AIKIDO-2025-10063

questdb is vulnerable to Memory Leak

Memory Leak Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.

30

Low Risk

This Affects:

JAVAquestdb
3.0.0 - 8.2.1
Fixed in 8.2.2

TL;DR

Affected versions of the package are vulnerable to memory leaks. When a mapping exception occurs during TableReader resizing after adding a column, it can cause a leak of file descriptors and memory. Additionally, if an error occurs while opening an index file during a table write, mapped memory may leak due to improper cleanup in the error handling process.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range.

Background info

questdb is vulnerable to Memory Leak in versions 3.0.0 - 8.2.1.

How to fix this

Upgrade the org.questdb:questdb library to the patch version.