Description
Integer wraparound in PostgreSQL in-memory tuple-size calculations allows a database user to execute arbitrary code as the operating system user running the database, via oversized tuple data. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.
Vulnerability Information
- Product / Framework: PostgreSQL Core
- Vendor Domain: www.postgresql.org
- Vulnerability Type: RCE
- CVE Details: View Full CVE Details →