CVE-2026-116308

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.7 PostgreSQL versions prior to 17.12 PostgreSQL versions prior to 16.16 PostgreSQL versions prior to 15.20 PostgreSQL versions prior to 14.25

Description A buffer over-read exists in the dict int component. This issue allows a database user to disclose portions of server memory by utilizing a zero-length token. A buffer over-read occurs when a program reads more data from a buffer than it is intended to, potentially exposing sensitive information stored in adjacent memory locations.

Recommendations Update to version 18.7 or later. Update to version 17.12 or later. Update to version 16.16 or later. Update to version 15.20 or later. Update to version 14.25 or later.