BIT-postgresql-2026-14679

See a problem?

Import Source

https://github.com/bitnami/vulndb/tree/main/data/postgresql/BIT-postgresql-2026-14679.json

JSON Data

https://api.osv.dev/v1/vulns/BIT-postgresql-2026-14679

Aliases

CVE-2026-14679

Published

2026-08-19T08:52:44.105Z

Modified

2026-08-19T09:45:18.822667137Z

Summary

PostgreSQL stack buffer overflow in argument match writes 0x0 and 0x1 to server memory

Details

Stack buffer overflow in PostgreSQL argument name matching allows an object creator to achieve unknown impacts via OUT parameter count. The attack can write only 0x0 and 0x1 bytes. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.

Database specific

{
    "severity": "High",
    "cpes": [
        "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*"
    ]
}

References

Affected packages

Bitnami / postgresql

Package

Name: postgresql
Purl: pkg:bitnami/postgresql

Severity

8.2 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H CVSS Calculator

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

14.24.0

Introduced

15.0.0

Fixed

15.19.0

Introduced

16.0.0

Fixed

16.15.0

Introduced

17.0.0

Fixed

17.11.0

Introduced

18.0.0

Fixed

18.5.0

Database specific

source

"https://github.com/bitnami/vulndb/tree/main/data/postgresql/BIT-postgresql-2026-14679.json"