CVE-2026-120057

A flaw was found in psqlODBC. When processing large-object read loread responses from a database, the driver copies returned data into the application buffer without checking whether the data exceeds the buffer size. A malicious server or a network attacker performing a man-in-the-middle MitM...

CVE-2026-120057

psqlODBC copies the reply to a large-object read loread into the application's buffer using the length sent by the server, without comparing it to the buffer size. A server not trusted under current SSL settings, or a man-in-the-middle, can return more bytes than the buffer holds and overwrite...

CVE-2026-120057 psqlODBC large-object read overflows the application buffer

psqlODBC copies the reply to a large-object read loread into the application's buffer using the length sent by the server, without comparing it to the buffer size. A server not trusted under current SSL settings, or a man-in-the-middle, can return more bytes than the buffer holds and overwrite...

EUVD-2026-115370

psqlODBC copies the reply to a large-object read loread into the application's buffer using the length sent by the server, without comparing it to the buffer size. A server not trusted under current SSL settings, or a man-in-the-middle, can return more bytes than the buffer holds and overwrite...

CVE-2026-120057: PostgreSQL psqlODBC: psqlODBC copies the reply to a large-object read (loread) into the application's buffer using the length sent by the…

psqlODBC copies the reply to a large-object read loread into the application's buffer using the length sent by the server, without comparing it to the buffer size. A server not trusted under current SSL settings, or a man-in-the-middle, can return more bytes than the buffer holds and overwrite...