CVE-2026-109448

A flaw was found in postgresql-odbc. An integer wraparound vulnerability in the SQLBindParameter function allows an attacker who controls the number of parameters bound in a database query to corrupt heap memory. By binding an excessively large number of parameters on a single statement, an...

CVE-2026-109448

Integer wraparound in psqlODBC SQLBindParameter allows an application, or an attacker who controls how many parameters the application binds on one statement, to corrupt heap memory. psqlODBC stores the binding count in a signed 16-bit field. Binding parameter number 32768 wraps that count to...

EUVD-2026-97731

Integer wraparound in psqlODBC SQLBindParameter allows an application, or an attacker who controls how many parameters the application binds on one statement, to corrupt heap memory. psqlODBC stores the binding count in a signed 16-bit field. Binding parameter number 32768 wraps that count to...

CVE-2026-109448

The psqlODBC driver contains an integer wraparound vulnerability in the SQLBindParameter function, affecting versions prior to 18.00.0005 . The root cause is the use of a signed 16-bit field to store the binding count; providing 32,768 parameters causes the count to wrap to -32,768, leading to a ...

CVE-2026-109448 psqlODBC SQLBindParameter heap memory corruption when binding more than 32767 parameters

Integer wraparound in psqlODBC SQLBindParameter allows an application, or an attacker who controls how many parameters the application binds on one statement, to corrupt heap memory. psqlODBC stores the binding count in a signed 16-bit field. Binding parameter number 32768 wraps that count to...