Threat database

t-digest versions 3.1 through 3.3 have a denial of service vulnerability in the MergingDigest.fromBytes method. This flaw arises because the method does not properly validate the length and capacity fields from serialized input data. An attacker can craft serialized digests with mismatched header fields to cause exceptions that abort the parsing thread.

t-digest versions 3.1 through 3.3 contain a vulnerability where centroid means are not validated during deserialization in MergingDigest.fromBytes. This allows attackers to inject NaN values that bypass validation, causing sorting performance degradation from O(n log n) to O(n squared) during merge operations, resulting in severe processing delays.