PT-2026-71475 · Postgresql Global Development Group+2 · Postgresql+2
CVE-2026-14679
·
Published
2026-08-12
·
Updated
2026-09-03
CVSS v2.0
8.5
High
| Vector | AV:N/AC:L/Au:N/C:N/I:P/A:C |
Name of the Vulnerable Software and Affected Versions
PostgreSQL versions prior to 18.5
PostgreSQL versions prior to 17.11
PostgreSQL versions prior to 16.15
PostgreSQL versions prior to 15.19
PostgreSQL versions prior to 14.24
Description
A stack buffer overflow occurs during argument name matching. This allows an object creator to cause unknown impacts by manipulating the
OUT parameter count. The attack is limited to writing only 0x0 and 0x1 bytes.Recommendations
Update to version 18.5 or later.
Update to version 17.11 or later.
Update to version 16.15 or later.
Update to version 15.19 or later.
Update to version 14.24 or later.
Fix
DoS
Stack Overflow
Heap Based Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linuxmint
Postgresql
Ubuntu