CVE-2026-120139

A flaw was found in PostgreSQL. An integer wraparound an arithmetic calculation exceeding numerical limits occurs during in-memory tuple-size calculations when handling oversized data. An authenticated database user can exploit this flaw to execute arbitrary code with the privileges of the...

CVE-2026-116328

A flaw was found in PostgreSQL. An integer wraparound vulnerability in memory context management allows an authenticated database user to execute arbitrary code with the privileges of the operating system user running the database. By freeing a memory allocation exceeding one gigabyte 1 GB, the...

CVE-2026-120139

Integer wraparound in PostgreSQL in-memory tuple-size calculations allows a database user to execute arbitrary code as the operating system user running the database, via oversized tuple data. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected...

CVE-2026-116328

Integer wraparound in PostgreSQL generation memory contexts allows a database user to execute arbitrary code as the operating system user running the database, via freeing an allocation larger than 1 GB and causing its block to be reused for smaller chunks whose back-pointer offset cannot represe...

CVE-2026-120139

Integer wraparound in PostgreSQL in-memory tuple-size calculations allows a database user to execute arbitrary code as the operating system user running the database, via oversized tuple data. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected...

CVE-2026-120139 PostgreSQL tuple-size integer wraparound executes arbitrary code

Integer wraparound in PostgreSQL in-memory tuple-size calculations allows a database user to execute arbitrary code as the operating system user running the database, via oversized tuple data. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected...

CVE-2026-120139

PostgreSQL is vulnerable to arbitrary code execution due to an integer wraparound flaw in in-memory tuple-size calculations. An attacker with database user privileges can trigger this by providing oversized tuple data , allowing them to execute code as the operating system user running the databa...

EUVD-2026-124516

Integer wraparound in PostgreSQL in-memory tuple-size calculations allows a database user to execute arbitrary code as the operating system user running the database, via oversized tuple data. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected...

CVE-2026-120139

Integer wraparound in PostgreSQL in-memory tuple-size calculations allows a database user to execute arbitrary code as the operating system user running the database, via oversized tuple data. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected...

CVE-2026-116328

PostgreSQL versions 16, 17, and 18 are vulnerable to an integer wraparound in generation memory contexts. A database user can execute arbitrary code as the operating system user by freeing an allocation larger than 1 GB, causing its block to be reused for smaller chunks where the back-pointer off...

EUVD-2026-124507

Integer wraparound in PostgreSQL generation memory contexts allows a database user to execute arbitrary code as the operating system user running the database, via freeing an allocation larger than 1 GB and causing its block to be reused for smaller chunks whose back-pointer offset cannot represe...

CVE-2026-116328

Integer wraparound in PostgreSQL generation memory contexts allows a database user to execute arbitrary code as the operating system user running the database, via freeing an allocation larger than 1 GB and causing its block to be reused for smaller chunks whose back-pointer offset cannot represe...

CVE-2026-116328

Integer wraparound in PostgreSQL generation memory contexts allows a database user to execute arbitrary code as the operating system user running the database, via freeing an allocation larger than 1 GB and causing its block to be reused for smaller chunks whose back-pointer offset cannot represe...

CVE-2026-116328 PostgreSQL generation memory context integer wraparound executes arbitrary code

Integer wraparound in PostgreSQL generation memory contexts allows a database user to execute arbitrary code as the operating system user running the database, via freeing an allocation larger than 1 GB and causing its block to be reused for smaller chunks whose back-pointer offset cannot represe...

CVE-2026-38427

CVE-2026-38427: Integer Wraparound → Heap Buffer Overflow in Tasmota fetchjpg CVE: CVE-2026-38427 Severity: Critical CVSS 9.8 Product: Arendst Tasmota Affected Version: = 15.3.0.3 File: tasmota/tasmotaxdrvdriver/xdrv10scripter.ino Function: fetchjpg — case 2 MJPEG frame fetch Author: Saidakbarxon...

PT-2026-145818

Integer wraparound in PostgreSQL generation memory contexts allows a database user to execute arbitrary code as the operating system user running the database, via freeing an allocation larger than 1 GB and causing its block to be reused for smaller chunks whose back-pointer offset cannot represe...

Important: postgresql-odbc

Issue Overview: Integer wraparound in psqlODBC SQLBindParameter allows an application, or an attacker who controls how many parameters the application binds on one statement, to corrupt heap memory. psqlODBC stores the binding count in a signed 16-bit field. Binding parameter number 32768 wraps...

PT-2026-145826

Integer wraparound in PostgreSQL in-memory tuple-size calculations allows a database user to execute arbitrary code as the operating system user running the database, via oversized tuple data. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected...

Vulnerability in core server (CVE-2026-116328)

PostgreSQL generation memory context integer wraparound executes arbitrary code Integer wraparound in PostgreSQL generation memory contexts allows a database user to execute arbitrary code as the operating system user running the database, via freeing an allocation larger than 1 GB and causing it...

CVE-2026-116328: n/a PostgreSQL: Integer wraparound in PostgreSQL generation memory contexts allows a database user to execute arbitrary code as the…

Integer wraparound in PostgreSQL generation memory contexts allows a database user to execute arbitrary code as the operating system user running the database, via freeing an allocation larger than 1 GB and causing its block to be reused for smaller chunks whose back-pointer offset cannot represe...