← Back

CVE-2026-6575

nvd nist
Published: May 14, 2026Modified: Jun 17, 2026

JSON object

Loading...
4.3
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Exploitability: 2.8 / Impact: 1.4
Source: f86ef6dc-4d3a-42ad-8f28-e6d5547a5007 (Secondary)

Description

Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array. This allows a table maintainer to infer memory values past that array end. Within major version 18, minor versions before PostgreSQL 18.4 are affected. Versions before PostgreSQL 18 are unaffected.

Affected (1)

Postgresql
1 product
Postgresql
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Postgresql
From 18.0 to 18.4

Related CWEs

CWE-126
Buffer Over-read
The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

References (1)

Source: f86ef6dc-4d3a-42ad-8f28-e6d5547a5007
PatchVendor Advisory

Timeline

No history available yet.