Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-ph64-qjwg-mxwq

Опубликовано: 13 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

Type confusion regarding input of PostgreSQL ctid data type selectivity estimator allows an object creator to view a calculation derived from the value of an arbitrary 4-byte span of memory, via a chosen non-ctid input. While the calculation loses precision, substantial memory value recovery appears possible. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.

Type confusion regarding input of PostgreSQL ctid data type selectivity estimator allows an object creator to view a calculation derived from the value of an arbitrary 4-byte span of memory, via a chosen non-ctid input. While the calculation loses precision, substantial memory value recovery appears possible. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.

EPSS

Процентиль: 27%
0.00334
Низкий

8.1 High

CVSS3

Дефекты

CWE-843

Связанные уязвимости

CVSS3: 8.1
ubuntu
3 месяца назад

Type confusion regarding input of PostgreSQL ctid data type selectivity estimator allows an object creator to view a calculation derived from the value of an arbitrary 4-byte span of memory, via a chosen non-ctid input. While the calculation loses precision, substantial memory value recovery appears possible. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.

CVSS3: 8.1
redhat
3 месяца назад

Type confusion regarding input of PostgreSQL ctid data type selectivity estimator allows an object creator to view a calculation derived from the value of an arbitrary 4-byte span of memory, via a chosen non-ctid input. While the calculation loses precision, substantial memory value recovery appears possible. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.

CVSS3: 8.1
nvd
3 месяца назад

Type confusion regarding input of PostgreSQL ctid data type selectivity estimator allows an object creator to view a calculation derived from the value of an arbitrary 4-byte span of memory, via a chosen non-ctid input. While the calculation loses precision, substantial memory value recovery appears possible. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.

CVSS3: 8.1
msrc
3 месяца назад

PostgreSQL ctid type confusion in selectivity estimator discloses derivative of arbitrary read

CVSS3: 8.1
debian
3 месяца назад

Type confusion regarding input of PostgreSQL ctid data type selectivit ...

EPSS

Процентиль: 27%
0.00334
Низкий

8.1 High

CVSS3

Дефекты

CWE-843