CVE-2026-14664

CVE-2026-14664: Heap buffer overflow in PostgreSQL regexp parsing enables an attacker to execute arbitrary code as the database host OS user. The vulnerability stems from unvalidated data growth when round-tripping through pg_wchar and affects PostgreSQL versions before 18.5, 17.11, 16.15, 15.19,...

Vulnerability in core server (CVE-2026-14664)

PostgreSQL regexp heap buffer overflow executes arbitrary code Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user running the database, via text that would not pass encoding validation. This shares heritage with CVE-2026-2006,...