Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-18022

Опубликовано: 29 июл. 2026
Источник: nvd
CVSS3: 8.8
EPSS Низкий

Описание

Integer wraparound in IVFFlat index build in pgvector before 0.8.6 allows a database user to write data out-of-bounds, which could lead to arbitrary code execution. Only 32-bit systems are affected.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:pgvector_project:pgvector:*:*:*:*:*:postgresql:*:*
Версия до 0.8.6 (исключая)

EPSS

Процентиль: 49%
0.00601
Низкий

8.8 High

CVSS3

Дефекты

CWE-190

Связанные уязвимости

CVSS3: 8.8
ubuntu
3 месяца назад

Integer wraparound in IVFFlat index build in pgvector before 0.8.6 allows a database user to write data out-of-bounds, which could lead to arbitrary code execution. Only 32-bit systems are affected.

CVSS3: 8.8
redhat
3 месяца назад

Integer wraparound in IVFFlat index build in pgvector before 0.8.6 allows a database user to write data out-of-bounds, which could lead to arbitrary code execution. Only 32-bit systems are affected.

CVSS3: 8.8
debian
3 месяца назад

Integer wraparound in IVFFlat index build in pgvector before 0.8.6 all ...

CVSS3: 8.8
github
3 месяца назад

Integer wraparound in IVFFlat index build in pgvector before 0.8.6 allows a database user to write data out-of-bounds, which could lead to arbitrary code execution. Only 32-bit systems are affected.

CVSS3: 8.8
altlinux
3 месяца назад

ALT-PU-2026-12155: package `postgresql15-pgvector` update to version 0.8.6-alt1

EPSS

Процентиль: 49%
0.00601
Низкий

8.8 High

CVSS3

Дефекты

CWE-190