PT-2026-40925
CVE-2026-6575
·
Published
2026-05-13
·
Updated
2026-07-06
Description by
CVSS 3.1
4.3
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
PostgreSQL versions 18.0 through 18.3
Description
A buffer over-read occurs in the
pg restore attribute stats() function when it accepts array values of unmatched length. This causes query planning to read past the end of one array, allowing a table maintainer to infer memory values beyond that boundary.Recommendations
Update to version 18.4.
Found an issue in the description? Have something to add? Feel free to write us 👾