Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array. This allows a table maintainer to infer memory values past that array end. Within major version 18, minor versions before PostgreSQL 18.4 are affected. Versions before PostgreSQL 18 are unaffected.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresql18 | May 15, 2026 | May 14, 2026 |
| Amazon_linux_2023 | — | Upgrade postgresql18Upgrade postgresql18-pltclUpgrade postgresql18-test-debuginfoUpgrade postgresql18-contribUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql18-pltcl-debuginfoUpgrade postgresql18-plperlUpgrade postgresql18-server-debuginfoUpgrade postgresql18-upgrade-develUpgrade postgresql18-llvmjitUpgrade postgresql18-contrib-debuginfoUpgrade postgresql18-testUpgrade postgresql18-private-develUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql18-staticUpgrade postgresql18-docsUpgrade postgresql18-test-rpm-macrosUpgrade postgresql18-plpython3Upgrade postgresql18-docs-debuginfoUpgrade postgresql18-debugsourceUpgrade postgresql18-upgradeUpgrade postgresql18-plperl-debuginfoUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql18-llvmjit-debuginfoUpgrade postgresql18-server-develUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresql18-private-libsUpgrade postgresql18-serverUpgrade postgresql18-debuginfo | Jun 9, 2026 | May 14, 2026 |
| Freebsd | — | Upgrade postgresql15-clientUpgrade postgresql14-serverUpgrade postgresql16-clientUpgrade postgresql14-clientUpgrade postgresql18-clientUpgrade postgresql17-serverUpgrade postgresql17-clientUpgrade postgresql16-serverUpgrade postgresql18-serverUpgrade postgresql15-server | May 21, 2026 | May 14, 2026 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Aug 17, 2026 | Aug 17, 2026 |
| Postgres | — | Upgrade to PostgreSQL version 18.4 | May 14, 2026 | May 14, 2026 |
| Redhat_linux | — | Upgrade postgresql18-private-develUpgrade postgresql18-private-libs-debuginfoUpgrade pg_repack-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-plpython3Upgrade postgresql-plperl-debuginfoUpgrade pgaudit-debugsourceUpgrade postgis-debuginfoUpgrade pgvector-debugsourceUpgrade postgresql-docs-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql18-test-debuginfoUpgrade pg_repack-debugsourceUpgrade pgvectorUpgrade postgresql-test-debuginfoUpgrade postgresql18Upgrade postgis-upgradeUpgrade postgresql18-test-rpm-macrosUpgrade postgresql18-testUpgrade postgresql18-pltcl-debuginfoUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-server-devel-debuginfoUpgrade postgis-client-debuginfoUpgrade postgresql18-docs-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgresql18-plperl-debuginfoUpgrade postgresql-contribUpgrade postgresql-contrib-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql18-serverUpgrade postgisUpgrade postgresql18-upgrade-develUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql18-debuginfoUpgrade postgis-upgrade-debuginfoUpgrade postgresql18-debugsourceUpgrade postgresql18-plpython3Upgrade postgresql-staticUpgrade postgresql-testUpgrade postgresql18-contrib-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-pltclUpgrade postgis-debugsourceUpgrade postgis-clientUpgrade postgresql18-staticUpgrade postgresql18-plperlUpgrade postgres-decoderbufsUpgrade pgvector-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-plperlUpgrade postgresqlUpgrade postgresql18-server-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql18-contribUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-private-libsUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgis-utilsUpgrade pgauditUpgrade postgresql18-upgradeUpgrade postgresql-docsUpgrade postgresql-serverUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql18-server-develUpgrade postgresql-server-develUpgrade pgaudit-debuginfoUpgrade postgresql-debugsourceUpgrade postgis-docsUpgrade pg_repackUpgrade postgresql18-private-libsUpgrade postgresql18-docsUpgrade postgresql-private-develUpgrade postgresql18-plpython3-debuginfo | Jul 17, 2026 | May 14, 2026 |
| Ubuntu | — | Upgrade postgresql-14Upgrade postgresql-17Upgrade postgresql-16Upgrade postgresql-18 | May 25, 2026 | May 21, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub