EUVD-2026-124501

Improper null termination in PostgreSQL array element assignment allows a database user to disclose server memory, via changing the final byte of a fixed-length name value to a nonzero byte and passing it to code that treats the value as a C string. Versions before PostgreSQL 18.7, 17.12, 16.16,...

CVE-2026-116321

A vulnerability in PostgreSQL (core server) allows a database user to disclose server memory. The issue is caused by improper null termination during array element assignment, where changing the final byte of a fixed-length name value to a nonzero byte allows it to be processed as a C string. Aff...