← Back

CVE-2026-14676

nvd nist
Published: Aug 13, 2026Modified: Aug 29, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: f86ef6dc-4d3a-42ad-8f28-e6d5547a5007 (Secondary)

Description

Heap buffer overflow in PostgreSQL pg_stat_statements allows the query author to execute arbitrary code as the operating system user running the database, via crafted queries containing array constants. Within major version 18, minor versions before PostgreSQL 18.6 are affected. Versions before PostgreSQL 18 are unaffected.

Affected (1)

Postgresql
1 product
Postgresql
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Postgresql
From 18.0 to 18.5

Related CWEs

CWE-122
Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

References (1)

Source: f86ef6dc-4d3a-42ad-8f28-e6d5547a5007
Vendor Advisory

Timeline

No history available yet.