CVE-2026-105614

PostgreSQL Anonymizer's anon.imageblur function doesn't check the declared dimension of the provided image, allowing an attacker to provide a small image with enormous declared dimensions. This vulnerability can be exploited to exhaust the memory of a backend and OOM-kill it when ovecommit is on,...

CVE-2026-105614

The PostgreSQL Anonymizer extension contains a memory allocation vulnerability in the anon.image_blur() function. The issue stems from a lack of dimension validation for provided images, allowing an attacker to submit a small image with enormous declared dimensions . This can lead to memory exhau...

CVE-2026-105614 PostgreSQL Anonymizer: Unbounded image-decode memory allocation (DoS) in anon.image_blur()

PostgreSQL Anonymizer's anon.imageblur function doesn't check the declared dimension of the provided image, allowing an attacker to provide a small image with enormous declared dimensions. This vulnerability can be exploited to exhaust the memory of a backend and OOM-kill it when ovecommit is on,...

EUVD-2026-112286

PostgreSQL Anonymizer's anon.imageblur function doesn't check the declared dimension of the provided image, allowing an attacker to provide a small image with enormous declared dimensions. This vulnerability can be exploited to exhaust the memory of a backend and OOM-kill it when ovecommit is on,...