https://seclists.org/oss-sec/2025/q2/115: CVE-2025-4207: PostgSQL GB18030 encoding validation can ad one byte past end of allocation for text that fails validation
Published May 9, 2025
·Updated
Affected Software
1 affected component
PostgreSQL postgresql<17.5, <16.9, <15.13, <14.18, <13.21
Frequently Asked Questions
1
What is the severity of CVE-2025-4207?
CVE-2025-4207 has been classified as a moderate severity vulnerability.
2
How do I fix CVE-2025-4207?
To fix CVE-2025-4207, users should upgrade to PostgreSQL versions 17.5, 16.9, 15.13, 14.18, or 13.21.
3
What type of vulnerability is CVE-2025-4207?
CVE-2025-4207 is a vulnerability in PostgreSQL related to GB18030 encoding validation which can cause it to read one byte past the end of allocation.
4
What are the potential impacts of CVE-2025-4207?
The potential impact of CVE-2025-4207 includes the risk of reading invalid memory, which could lead to application crashes or data corruption.
5
Is CVE-2025-4207 exploitable remotely?
There is no specific information indicating that CVE-2025-4207 is exploitable remotely; it primarily affects how PostgreSQL processes certain text inputs.