← Back

CVE-2026-14679

nvd nist
Published: Aug 13, 2026Modified: Aug 29, 2026

JSON object

Loading...
8.2
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Exploitability: 3.9 / Impact: 4.2
Source: f86ef6dc-4d3a-42ad-8f28-e6d5547a5007 (Secondary)

Description

Stack buffer overflow in PostgreSQL argument name matching allows an object creator to achieve unknown impacts via OUT parameter count. The attack can write only 0x0 and 0x1 bytes. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.

Affected (5)

Postgresql
1 product
Postgresql
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Postgresql
Postgresql
From 14.0 to 14.24
Postgresql
From 15.0 to 15.19
Postgresql
From 16.0 to 16.15
Postgresql
From 17.0 to 17.11
Postgresql
From 18.0 to 18.5

Related CWEs

CWE-121
Stack-based Buffer Overflow
A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

References (1)

Source: f86ef6dc-4d3a-42ad-8f28-e6d5547a5007
Vendor Advisory

Timeline

No history available yet.