Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array. This allows a table maintainer to infer memory values past that array end. Within major version 18, minor versions before PostgreSQL 18.4 are affected. Versions before PostgreSQL 18 are unaffected.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresql18 | May 15, 2026 | May 14, 2026 |
| Amazon_linux_2023 | — | Upgrade postgresql18-upgradeUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql18-server-develUpgrade postgresql18-llvmjit-debuginfoUpgrade postgresql18-serverUpgrade postgresql18-debugsourceUpgrade postgresql18-docs-debuginfoUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresql18-private-libsUpgrade postgresql18-debuginfoUpgrade postgresql18-plperl-debuginfoUpgrade postgresql18-staticUpgrade postgresql18-private-develUpgrade postgresql18-testUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql18-test-rpm-macrosUpgrade postgresql18-docsUpgrade postgresql18-upgrade-develUpgrade postgresql18-server-debuginfoUpgrade postgresql18-plpython3Upgrade postgresql18-test-debuginfoUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql18-contrib-debuginfoUpgrade postgresql18-contribUpgrade postgresql18-plperlUpgrade postgresql18-pltcl-debuginfoUpgrade postgresql18-pltclUpgrade postgresql18Upgrade postgresql18-llvmjit | Jun 9, 2026 | May 14, 2026 |
| Freebsd | — | Upgrade postgresql15-clientUpgrade postgresql14-serverUpgrade postgresql16-clientUpgrade postgresql14-clientUpgrade postgresql17-clientUpgrade postgresql18-clientUpgrade postgresql15-serverUpgrade postgresql17-serverUpgrade postgresql16-serverUpgrade postgresql18-server | May 21, 2026 | May 14, 2026 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Aug 17, 2026 | Aug 17, 2026 |
| Postgres | — | Upgrade to PostgreSQL version 18.4 | May 14, 2026 | May 14, 2026 |
| Redhat_linux | — | Upgrade pgvectorUpgrade postgis-upgradeUpgrade postgresql-test-debuginfoUpgrade postgresql18-private-develUpgrade postgresql18-test-rpm-macrosUpgrade postgresql-docs-debuginfoUpgrade postgresql18-docs-debuginfoUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql18-pltcl-debuginfoUpgrade postgresql18-upgrade-develUpgrade postgresql18-debuginfoUpgrade postgisUpgrade postgresql18-plperl-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-contribUpgrade postgresql-contrib-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-server-devel-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql18Upgrade postgresql-pltcl-debuginfoUpgrade pgvector-debugsourceUpgrade postgresql18-server-devel-debuginfoUpgrade postgis-upgrade-debuginfoUpgrade postgresql18-test-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-plperl-debuginfoUpgrade postgresql-upgrade-develUpgrade postgres-decoderbufs-debugsourceUpgrade postgis-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql18-serverUpgrade postgresql18-testUpgrade postgis-client-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-serverUpgrade postgresql18-debugsourceUpgrade postgresql-debuginfoUpgrade postgresql18-docsUpgrade postgresql18-staticUpgrade pgaudit-debuginfoUpgrade postgresql-staticUpgrade postgresql18-upgrade-debuginfoUpgrade postgis-clientUpgrade postgresql18-upgradeUpgrade postgresql-pltclUpgrade postgresql-server-debuginfoUpgrade postgresql-private-develUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql-docsUpgrade postgresql18-plpython3Upgrade postgres-decoderbufs-debuginfoUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgis-utilsUpgrade postgresql-private-libsUpgrade pgvector-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade pgauditUpgrade postgresql-plperlUpgrade postgresql18-server-debuginfoUpgrade postgresql18-contribUpgrade postgresqlUpgrade postgresql-testUpgrade postgresql-server-develUpgrade postgresql18-server-develUpgrade postgresql18-contrib-debuginfoUpgrade postgis-docsUpgrade pg_repackUpgrade postgresql18-private-libsUpgrade postgresql18-plperlUpgrade postgres-decoderbufsUpgrade postgis-debugsource | Jul 17, 2026 | May 14, 2026 |
| Ubuntu | — | Upgrade postgresql-16Upgrade postgresql-18Upgrade postgresql-17Upgrade postgresql-14 | May 25, 2026 | May 21, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub