CVE-2026-16241 affecting package postgresql for versions less than 16.15-1

CVE-2026-16241 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

DEBIAN-CVE-2026-16241

Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against the ECPG client via sending a bytea value lacking the mandatory prefix. The client overwrites a huge memory region with bytes outside attacker knowledge or control. This...

CVE-2026-16241 PostgreSQL ECPG integer underflow can crash the client

Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against the ECPG client via sending a bytea value lacking the mandatory prefix. The client overwrites a huge memory region with bytes outside attacker knowledge or control. This...