CVE-2026-102463
- Source
- https://cve.org/CVERecord?id=CVE-2026-102463
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-102463.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-102463
- Aliases
-
- GHSA-xqmh-8fhj-48fp
- Published
- 2026-10-15T08:13:41Z
- Modified
- 2026-10-17T02:47:32Z
- Severity
-
- 8.2 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator
- Summary
- [none]
- Details
-
In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the binary array decoder in vertx-pg-client (DataTypeCodec.binaryDecodeArray) allocates a Java array sized by a server-declared 32-bit dimension count with no upper bound. A malicious or compromised PostgreSQL server, or an on-path attacker intercepting an unencrypted connection, can send a crafted DataRow message with an excessively large array dimension value, causing the client to attempt a multi-gigabyte heap allocation and crash with an OutOfMemoryError.
The impacted component is io.vertx:vertx-pg-client.
- Database specific
{ "cna_assigner": "eclipse", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102463.json" }- References
Affected packages
Git / github.com/eclipse-vertx/vertx-sql-client
Affected ranges
- Type
- GIT
- Repo
- https://github.com/eclipse-vertx/vertx-sql-client
- Events
-
IntroducedLast AffectedIntroducedLast AffectedIntroducedLast AffectedIntroducedLast Affected
- Database specific
-
Show details
{ "extracted_events": [ { "introduced": "4.0.0" }, { "last_affected": "4.5.34" }, { "introduced": "5.0.0" }, { "last_affected": "5.0.12" }, { "introduced": "5.1.0" }, { "last_affected": "5.1.9" }, { "introduced": "5.2.0" }, { "last_affected": "5.2.0" } ], "source": "AFFECTED_FIELD" }
Affected versions
4.*
4.0.0
4.0.1
4.0.2
4.0.3
4.1.0
4.1.0.Beta1
4.1.0.CR1
4.1.0.CR2
4.1.1
4.2.0
4.2.0.Beta1
4.2.0.CR1
4.2.1
4.2.2
4.2.3
4.2.4
4.2.5
4.3.0
4.3.1
4.3.2
4.3.3
4.3.4
4.3.5
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.4.5
4.5.0
4.5.1
4.5.10
4.5.11
4.5.12
4.5.13
4.5.14
4.5.15
4.5.16
4.5.17
4.5.18
4.5.19
4.5.2
4.5.20
4.5.21
4.5.22
4.5.23
4.5.24
4.5.25
4.5.26
4.5.27
4.5.28
4.5.29
4.5.3
4.5.30
4.5.31
4.5.32
4.5.33
4.5.34
4.5.4
4.5.5
4.5.6
4.5.7
4.5.8
4.5.9
5.*
5.0.0
5.0.1
5.0.10
5.0.11
5.0.12
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.0.9
5.2.0