PT-2026-113987

Integer overflow in the message buffer growth logic mbuf make room in PgBouncer 1.21.0 through 1.26.0 allows a remote attacker to cause a denial of service when max packet size is configured above 2147483648. A packet header declaring a length above 2^31 makes the buffer size computation overflow...