CVE-2026-116310

Name of the Vulnerable Software and Affected Versions PostgreSQL versions 17.0 through 17.11 PostgreSQL versions 18.0 through 18.6

Description A use after free issue exists in the COPY FROM error reporting mechanism. A database user can disclose portions of server memory by providing a longer input row after a conversion error has been ignored or nullified. This issue also affects the file fdw module in version 18.

Recommendations Update PostgreSQL 17 to version 17.12. Update PostgreSQL 18 to version 18.7.