Buffer Over-read

Overview Affected versions of this package are vulnerable to Buffer Over-read via the ascii function. An attacker can access up to 3 bytes of memory beyond the intended buffer by supplying a specially crafted text value. Remediation Upgrade libpq to version 14.24, 15.19, 16.15, 17.11 or higher...

RHSA-2026:50779 Red Hat Security Advisory: libpq security update

Bulletin has no description...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via the CREATE STATISTICS command. A table owner can exploit this vulnerability by creating a statistics object in an arbitrary schema, blocking other users with valid CREATE privileges from creating a statistics...

CLSA-2025-1761323193 libpq: Fix of CVE-2025-1094

CVE-2025-1094: fix potential SQL injections allowed by an improper encoding validation in data quoting functions...

PT-2018-14484

Name of the Vulnerable Software and Affected Versions libpg query versions 10 through 1.0.2 Description A memory leak was found in the pg query raw parse function within pg query parse.c, potentially leading to a denial of service. Recommendations For libpg query versions 10 through 1.0.2, at the...