Heap buffer overflow in PostgreSQL pg_stat_statements allows the query author to execute arbitrary code as the operating system user running the database, via crafted queries containing array constants. Within major version 18, minor versions before PostgreSQL 18.5 are affected. Versions before PostgreSQL 18 are unaffected.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresql17Upgrade postgresql16Upgrade postgresql15Upgrade postgresql18 | Aug 17, 2026 | Aug 13, 2026 |
| Amazon_linux_2023 | — | Upgrade postgresql18-plperlUpgrade postgresql18-contrib-debuginfoUpgrade postgresql18-test-rpm-macrosUpgrade postgresql18-llvmjitUpgrade postgresql18-docsUpgrade postgresql18-private-develUpgrade postgresql18-private-libsUpgrade postgresql18-staticUpgrade postgresql18-upgradeUpgrade postgresql18-contribUpgrade postgresql18-server-debuginfoUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql18-pltclUpgrade postgresql18-debuginfoUpgrade postgresql18-plpython3Upgrade postgresql18-upgrade-develUpgrade postgresql18Upgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresql18-docs-debuginfoUpgrade postgresql18-debugsourceUpgrade postgresql18-test-debuginfoUpgrade postgresql18-testUpgrade postgresql18-plperl-debuginfoUpgrade postgresql18-serverUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql18-pltcl-debuginfoUpgrade postgresql18-llvmjit-debuginfoUpgrade postgresql18-server-devel | Sep 1, 2026 | Aug 13, 2026 |
| Freebsd | — | Upgrade postgresql17-serverUpgrade postgresql18-serverUpgrade postgresql16-serverUpgrade postgresql15-serverUpgrade postgresql14-server | Aug 17, 2026 | Aug 16, 2026 |
| Postgres | — | Upgrade to PostgreSQL version 18.6 | Aug 14, 2026 | Aug 13, 2026 |
| Redhat_linux | — | Upgrade postgresql-plperl-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-private-develUpgrade postgresql18-staticUpgrade postgresql-debuginfoUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql-docsUpgrade postgresql18-docsUpgrade postgis-debugsourceUpgrade postgresql-server-devel-debuginfoUpgrade pg_repack-debugsourceUpgrade pgauditUpgrade pg_repackUpgrade postgresql18-contribUpgrade postgis-clientUpgrade postgresql18-server-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-debugsourceUpgrade postgresql-server-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql18-plperlUpgrade postgresql18-upgrade-develUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-staticUpgrade postgres-decoderbufs-debuginfoUpgrade postgresqlUpgrade postgresql-pltcl-debuginfoUpgrade postgis-debuginfoUpgrade postgresql18-contrib-debuginfoUpgrade postgresql18-private-libsUpgrade postgresql18-upgradeUpgrade postgresql18-serverUpgrade pgvector-debugsourceUpgrade postgresql18-debuginfoUpgrade pgvectorUpgrade postgresql18-testUpgrade postgresql-contrib-debuginfoUpgrade pgaudit-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql18-private-develUpgrade postgresql-test-debuginfoUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresql18-docs-debuginfoUpgrade postgresql-testUpgrade postgresql-docs-debuginfoUpgrade postgresql18-server-develUpgrade pg_repack-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-plperlUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresql18-test-debuginfoUpgrade postgresql18Upgrade postgresql-test-rpm-macrosUpgrade postgis-upgrade-debuginfoUpgrade postgis-client-debuginfoUpgrade postgresql18-plpython3Upgrade postgres-decoderbufs-debugsourceUpgrade postgisUpgrade postgis-utilsUpgrade postgresql18-plperl-debuginfoUpgrade postgresql-private-libsUpgrade pgvector-debuginfoUpgrade postgresql18-debugsourceUpgrade postgresql-server-develUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql18-pltcl-debuginfoUpgrade postgresql-upgradeUpgrade postgis-upgradeUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql18-test-rpm-macrosUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql-contribUpgrade postgis-docsUpgrade postgresql-plpython3 | Aug 27, 2026 | Aug 13, 2026 |
| Rocky_linux | — | Upgrade postgresql-pltclUpgrade postgresql-serverUpgrade postgresql-private-develUpgrade postgresql18-server-develUpgrade postgres-decoderbufs-debuginfoUpgrade postgis-upgrade-debuginfoUpgrade postgresql18-plperlUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-staticUpgrade postgresql18-docs-debuginfoUpgrade pg_repackUpgrade postgresql18-contrib-debuginfoUpgrade postgresql-contribUpgrade pgauditUpgrade postgis-debugsourceUpgrade postgresql18-upgradeUpgrade postgresql18-docsUpgrade postgresql-plperl-debuginfoUpgrade postgresql18-server-debuginfoUpgrade postgresql18-private-libsUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql18-staticUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-plperlUpgrade postgis-debuginfoUpgrade postgresqlUpgrade postgresql18-private-develUpgrade postgis-clientUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgis-client-debuginfoUpgrade postgresql-docsUpgrade postgresql18-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-upgradeUpgrade postgresql18-plpython3Upgrade postgresql-upgrade-develUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql-testUpgrade pgaudit-debugsourceUpgrade postgresql18-plperl-debuginfoUpgrade postgresql18-contribUpgrade postgresql-plpython3-debuginfoUpgrade pgaudit-debuginfoUpgrade pgvector-debugsourceUpgrade pg_repack-debuginfoUpgrade postgresql18-upgrade-develUpgrade postgresql18-test-debuginfoUpgrade postgis-utilsUpgrade pgvector-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql18-debugsourceUpgrade postgisUpgrade pg_repack-debugsourceUpgrade postgresql18-serverUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-server-develUpgrade postgis-docsUpgrade pgvectorUpgrade postgresql18-testUpgrade postgresql-debugsourceUpgrade postgresql-plpython3Upgrade postgis-upgradeUpgrade postgresql-private-libsUpgrade postgresql-contrib-debuginfoUpgrade postgresql18Upgrade postgres-decoderbufs-debugsourceUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-docs-debuginfo | Sep 17, 2026 | Sep 15, 2026 |
| Ubuntu | — | Upgrade postgresql-16Upgrade postgresql-14Upgrade postgresql-18 | Aug 20, 2026 | Aug 13, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub