CVE-2026-6575
Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array. This allows a table maintainer to infer memory values past that array end. Within major version 18, minor versions before PostgreSQL 18.4 are affected. Versions before PostgreSQL 18 are unaffected.
- Score
- CVSS 3.1 4.3 Medium
- Status
- Analyzed - f86ef6dc-4d3a-42ad-8f28-e6d5547a5007
- Published
- 2026-05-14
- Last modified
- 2026-05-14
- Weaknesses
- CWE-126
Affected products
References
- https://www.postgresql.org/support/security/CVE-2026-6575/
