CVE-2026-14678

Buffer over-read in PostgreSQL pgtrgm index picksplit function reads past end of a heap buffer. This might allow a table maintainer to infer limited memory values, via the lossy signal of index split choices. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected...

CVE-2026-14678

The provided records identify CVE-2026-14678 as a buffer over-read in PostgreSQL’s pg_trgm index picksplit function, which reads past the end of a heap buffer. This may allow a table maintainer to infer limited memory values via the lossy signal of index split choices. Affected are PostgreSQL ver...

Vulnerability in contrib module (CVE-2026-14678)

PostgreSQL pgtrgm picksplit reads past end of buffer Buffer over-read in PostgreSQL pgtrgm index picksplit function reads past end of a heap buffer. This might allow a table maintainer to infer limited memory values, via the lossy signal of index split choices. Versions before PostgreSQL 18.5,...