CVE-2026-116328
|
| |
|
|
Affected software |
POSTGRESQL |
|
|
|
Integer wraparound in PostgreSQL generation memory contexts allows a database user to execute arbitrary code as the operating system user running the database, via freeing an allocation larger than 1 GB and causing its block to be reused for smaller chunks whose back-pointer offset cannot represent that position. Within major versions 16-18, minor versions before PostgreSQL 18.7, 17.12, and 16.16 are affected. Versions before PostgreSQL 16 are unaffected. |
Link: |
| https://nvd.nist.gov/vuln/detail/CVE-2026-116328 |
