PT-2026-71480 · Postgresql Global Development Group+2 · Postgresql+2
CVE-2026-16238
·
Published
2026-08-12
·
Updated
2026-09-03
CVSS v2.0
9.0
High
| Vector | AV:N/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
PostgreSQL versions 18.0 through 18.4
Description
Type confusion in the
pg restore attribute stats() function allows an object creator to execute arbitrary code with the privileges of the operating system user running the database. This occurs due to the conflation of range and multirange values.Recommendations
Update PostgreSQL to version 18.5 or later.
Fix
DoS
Type Confusion
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Postgresql
Ubuntu