CVE-2026-120060

psqlODBC trusts counts and lengths in server data in three places. SQLBulkOperations uses a server-supplied row count in a size subtraction that can underflow. SQLStatistics iterates index keys using a server-supplied key count without bounding it to the fixed storage. Bytea octal decoding reads ...

CVE-2026-120060

The psqlODBC driver (versions before 18.00.0006 ) contains three vulnerabilities where it trusts server-supplied counts and lengths without proper validation. Specifically, SQLBulkOperations uses a server-supplied row count in a size subtraction that can cause an integer underflow . SQLStatistics...

CVE-2026-120060 psqlODBC does not validate server-supplied counts and lengths

psqlODBC trusts counts and lengths in server data in three places. SQLBulkOperations uses a server-supplied row count in a size subtraction that can underflow. SQLStatistics iterates index keys using a server-supplied key count without bounding it to the fixed storage. Bytea octal decoding reads ...

EUVD-2026-115373

psqlODBC trusts counts and lengths in server data in three places. SQLBulkOperations uses a server-supplied row count in a size subtraction that can underflow. SQLStatistics iterates index keys using a server-supplied key count without bounding it to the fixed storage. Bytea octal decoding reads ...