BIT-postgresql-2026-6477

See a problem?
Import Source
https://github.com/bitnami/vulndb/tree/main/data/postgresql/BIT-postgresql-2026-6477.json
JSON Data
https://api.osv.dev/v1/vulns/BIT-postgresql-2026-6477
Aliases
  • CVE-2026-6477
Published
2026-05-18T05:53:04Z
Modified
2026-09-10T16:01:45Z
Summary
PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory
Details

Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(), lo_lseek64(), and lo_tell64() functions allows the server superuser to overwrite a client stack buffer with an arbitrarily-large response. Like gets(), PQfn(..., result_is_int=0, ...) stores arbitrary-length, server-determined data into a buffer of unspecified size. Because both the \lo_export command in psql and pg_dump call lo_read(), the server superuser can overwrite pg_dump or psql stack memory. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.

Database specific 
{
    "cpes": [
        "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*"
    ],
    "severity": "High"
}
References

Affected packages

Bitnami / postgresql

Package

Name
postgresql
Purl
pkg:bitnami/postgresql

Severity

  • 8.4 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H CVSS Calculator

Affected ranges

Type
SEMVER
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
14.23.0
Introduced
15.0.0
Fixed
15.18.0
Introduced
16.0.0
Fixed
16.14.0
Introduced
17.0.0
Fixed
17.10.0
Introduced
18.0.0
Fixed
18.4.0

Database specific

source 
"https://github.com/bitnami/vulndb/tree/main/data/postgresql/BIT-postgresql-2026-6477.json"