CVE-2026-120064 psqlODBC does not validate column numbers and row indexes in binding and descriptor functions

[
  {
    "vendor": "PostgreSQL",
    "product": "psqlODBC",
    "repo": "https://github.com/postgresql-interfaces/psqlodbc",
    "programFiles": [
      "bind.c",
      "pgapi30.c",
      "results.c"
    ],
    "programRoutines": [
      {
        "name": "PGAPI_BindCol"
      },
      {
        "name": "reset_a_column_binding"
      },
      {
        "name": "column_bindings_set"
      },
      {
        "name": "PGAPI_ColAttributes"
      },
      {
        "name": "PGAPI_SetPos"
      }
    ],
    "defaultStatus": "unaffected",
    "versions": [
      {
        "version": "0",
        "lessThan": "18.00.0006",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]