REDHAT-BUG-2515328: Buffer Overflow

Q: Who can exploit this issue?

An attacker must be able to create a database object with a crafted long function transform list. Exploitation occurs when pg_dump processes that object.

Q: What privileges does successful exploitation provide?

Successful exploitation can execute arbitrary code as the operating system user that runs pg_dump. The resulting operating-system privileges depend on the account used for the dump operation.

Q: Which PostgreSQL releases contain the fix?

The issue is fixed in PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24. Versions earlier than those releases are affected.

Published Aug 13, 2026

Updated

Heap buffer overflow in PostgreSQL pgdump of long function transform lists allows an object creator to execute arbitrary code as the operating system user running pgdump, via a crafted transform list. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.

Affected Software

1 affected component

PostgreSQL postgresql<18.5, <17.11, <16.15, <15.19, <14.24

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade PostgreSQL to a version that resolves this vulnerability.
Fixed in 18.5
Upgrade
Upgrade PostgreSQL to a version that resolves this vulnerability.
Fixed in 17.11
Upgrade
Upgrade PostgreSQL to a version that resolves this vulnerability.
Fixed in 16.15
Upgrade
Upgrade PostgreSQL to a version that resolves this vulnerability.
Fixed in 15.19
Upgrade
Upgrade PostgreSQL to a version that resolves this vulnerability.
Fixed in 14.24

Event History

Aug 13, 2026

Data Sourced

via Red Hat·01:31 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Who can exploit this issue?

An attacker must be able to create a database object with a crafted long function transform list. Exploitation occurs when pg_dump processes that object.

What privileges does successful exploitation provide?

Successful exploitation can execute arbitrary code as the operating system user that runs pg_dump. The resulting operating-system privileges depend on the account used for the dump operation.

Which PostgreSQL releases contain the fix?

The issue is fixed in PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24. Versions earlier than those releases are affected.

REDHAT-BUG-2515328: Buffer Overflow

Affected Software

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

What privileges does successful exploitation provide?

Which PostgreSQL releases contain the fix?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What privileges does successful exploitation provide?

Which PostgreSQL releases contain the fix?