Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mpm7-fx5w-5w53

Опубликовано: 13 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

Buffer over-read in PostgreSQL ascii() SQL function allows a user to disclose up to 3 bytes after the end of a specific allocation, via a crafted text value. This is the same class of defect that CVE-2026-2006 fixed, though this instance has less impact. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.

Buffer over-read in PostgreSQL ascii() SQL function allows a user to disclose up to 3 bytes after the end of a specific allocation, via a crafted text value. This is the same class of defect that CVE-2026-2006 fixed, though this instance has less impact. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.

EPSS

Процентиль: 23%
0.00301
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-126

Связанные уязвимости

CVSS3: 4.3
ubuntu
9 дней назад

Buffer over-read in PostgreSQL ascii() SQL function allows a user to disclose up to 3 bytes after the end of a specific allocation, via a crafted text value. This is the same class of defect that CVE-2026-2006 fixed, though this instance has less impact. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.

CVSS3: 4.3
nvd
9 дней назад

Buffer over-read in PostgreSQL ascii() SQL function allows a user to disclose up to 3 bytes after the end of a specific allocation, via a crafted text value. This is the same class of defect that CVE-2026-2006 fixed, though this instance has less impact. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.

msrc
8 дней назад

PostgreSQL ascii() function reads past end of buffer

CVSS3: 4.3
debian
9 дней назад

Buffer over-read in PostgreSQL ascii() SQL function allows a user to d ...

EPSS

Процентиль: 23%
0.00301
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-126