REDHAT-BUG-2515321: Buffer Overflow

Q: What level of database access does an attacker need?

The issue is exploitable by an object creator. The provided information does not identify any unauthenticated or network-only attack path.

Q: Which PostgreSQL releases contain the fix?

Upgrade to PostgreSQL 18.5, 17.11, 16.15, 15.19, or 14.24, or a later release in the corresponding supported branch. Versions earlier than those releases are affected.

Q: Is the overflow limited in what it can write?

The described attack can write only 0x0 and 0x1 bytes. The resulting security impact is identified as unknown.

Published Aug 13, 2026

Updated

Stack buffer overflow in PostgreSQL argument name matching allows an object creator to achieve unknown impacts via OUT parameter count. The attack can write only 0x0 and 0x1 bytes. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.

Affected Software

1 affected component

PostgreSQL postgresql<18.5, <17.11, <16.15, <15.19, <14.24

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade PostgreSQL to a version that resolves this vulnerability.
Fixed in 18.5
Upgrade
Upgrade PostgreSQL to a version that resolves this vulnerability.
Fixed in 17.11
Upgrade
Upgrade PostgreSQL to a version that resolves this vulnerability.
Fixed in 16.15
Upgrade
Upgrade PostgreSQL to a version that resolves this vulnerability.
Fixed in 15.19
Upgrade
Upgrade PostgreSQL to a version that resolves this vulnerability.
Fixed in 14.24

Event History

Aug 13, 2026

Data Sourced

via Red Hat·01:30 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What level of database access does an attacker need?

The issue is exploitable by an object creator. The provided information does not identify any unauthenticated or network-only attack path.

Which PostgreSQL releases contain the fix?

Upgrade to PostgreSQL 18.5, 17.11, 16.15, 15.19, or 14.24, or a later release in the corresponding supported branch. Versions earlier than those releases are affected.

Is the overflow limited in what it can write?

The described attack can write only 0x0 and 0x1 bytes. The resulting security impact is identified as unknown.

REDHAT-BUG-2515321: Buffer Overflow

Affected Software

Remediation

Event History

Frequently Asked Questions

What level of database access does an attacker need?

Which PostgreSQL releases contain the fix?

Is the overflow limited in what it can write?

Company

Resources

Contact

Frequently Asked Questions

What level of database access does an attacker need?

Which PostgreSQL releases contain the fix?

Is the overflow limited in what it can write?