CVE-2026-120057

Name of the Vulnerable Software and Affected Versions psqlODBC versions prior to 18.00.0006

Description A buffer overflow occurs when the driver copies the reply from a large-object read into the application buffer using the length provided by the server without verifying it against the actual buffer size. An untrusted server or a man-in-the-middle attacker can send more bytes than the buffer can hold, allowing them to overwrite adjacent memory in the client process. This issue is triggered when fetching any large-object column.

Recommendations Update to version 18.00.0006.