During fuzz testing of Accord’s CQL integration, we identified an edge case that resulted in an IndexOutOfBoundsException. This issue was reported as CASSANDRA-20108 [1]. Initially, we believed this to be a type-related problem and did not draw attention to it. However, we ensured that the work was backported to 4.0.x and newer branches.
Further testing revealed that this issue is more prevalent than initially anticipated and could lead to data loss or incorrect results. User impact would be SELECT queries returning without including all data or incorrect results, including rows that should not have been returned. If you meet the following conditions, you may be affected: 1) You use DELETE [col] or you utilize time-to-live (TTL) values. 2) You have SELECT clauses that utilize the `<` or `<=` operators and are not indexed (this is not a concern for SAI). Given the severity of this issue, it is desirable that new releases be released to address this problem. [1] CASSANDRA-20108: IndexOutOfBoundsException when accessing a partition where the column was deleted