REDHAT-BUG-2439320: Buffer Overflow

Published Feb 12, 2026

Updated

Heap buffer overflow in PostgreSQL pgtrgm allows a database user to achieve unknown impacts via a crafted input string. The attacker has limited control over the byte patterns to be written, but we have not ruled out the viability of attacks that lead to privilege escalation. PostgreSQL 18.1 and 18.0 are affected.

Affected Software

1 affected component

PostgreSQL PostgreSQL (pg_trgm)=18.1, =18.0

Event History

Feb 12, 2026

Data Sourced

via Red Hat·02:01 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2439320?

The severity of REDHAT-BUG-2439320 is high with a score of 7.

What types of attacks can REDHAT-BUG-2439320 lead to?

REDHAT-BUG-2439320 may lead to privilege escalation attacks due to a heap buffer overflow in PostgreSQL pg_trgm.

How do I fix REDHAT-BUG-2439320?

To fix REDHAT-BUG-2439320, update PostgreSQL to the latest version that addresses the vulnerability.

Who is affected by REDHAT-BUG-2439320?

Database users of PostgreSQL version 18.1 and earlier are affected by REDHAT-BUG-2439320.

What is the description of REDHAT-BUG-2439320?

REDHAT-BUG-2439320 describes a heap buffer overflow vulnerability in PostgreSQL pg_trgm that can be exploited via crafted input.