CVE-2026-2005

Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.

Score
CVSS 3.1 8.8 High
Status
Modified - f86ef6dc-4d3a-42ad-8f28-e6d5547a5007
Published
2026-02-12
Last modified
2026-07-15
Weaknesses
CWE-120, CWE-122

Affected products

References

 
 
© AVABIS GmbH privacypolicy about