CVE-2026-120061 psqlODBC ODBC escape parser stack buffer overflow

The psqlODBC parser for ODBC escape sequences in application SQL text writes the argument offsets of a fn escape into a fixed 16-entry stack array without a bound and does not initialize the array. An escape with too many arguments overflows the stack, and a reference to an unsupplied argument...

CVE-2026-120061 psqlODBC ODBC escape parser stack buffer overflow

The psqlODBC parser for ODBC escape sequences in application SQL text writes the argument offsets of a fn escape into a fixed 16-entry stack array without a bound and does not initialize the array. An escape with too many arguments overflows the stack, and a reference to an unsupplied argument...

CVE-2026-120061

The psqlODBC driver contains a stack-based buffer overflow and an off-by-one error within its ODBC escape sequence parser. Specifically, the parser fails to bound and initialize a 16-entry stack array when processing {fn} escape sequences, allowing an escape with excessive arguments to overflow t...