PT-2026-145838
CVE-2026-120152
·
Published
2026-11-12
·
Updated
2026-11-12
Description by
CVSS 3.1
4.3
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Use after free in PostgreSQL pg show all settings() allows a database user to retrieve memory contents, via loading a module while the function is scanning custom-variable placeholders that the module replaces and frees. Within major versions 16-18, minor versions before PostgreSQL 18.7, 17.12, and 16.16 are affected. Versions before PostgreSQL 16 are unaffected.
Found an issue in the description? Have something to add? Feel free to write us 👾