Skip to content
fr Sign in
8.8 High

CVE-2026-14677 Integer wraparound in PostgreSQL 32-bit builds of pltcl and plperl allows an object creator to cause the server to…

Description

Integer wraparound in PostgreSQL 32-bit builds of pltcl and plperl allows an object creator to cause the server to undersize an allocation and write out-of-bounds via crafted function bodies. This may execute arbitrary code as the operating system user running the database. CVE-2026-6473 had fixed similar problems. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.

Affected products and versions

Product Affected versions Fixed in
postgresql 18 18 → < 18.6 18.6
postgresql 17 17 → < 17.11 17.11
postgresql 16 16 → < 16.15 16.15
postgresql 15 15 → < 15.19 15.19
postgresql 14.24 earliest → < 14.24 14.24

References

Timeline

  1. Published
  2. Last modified

Other CVEs of postgresql

The 79 CVEs of postgresql →
CVE-2026-6471 Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen… 7.2 High CVE-2026-14671 Type confusion in PostgreSQL module "refint" allows an object creator to execute arbitrary code as the operating… 8.8 High CVE-2026-6470 Missing authorization in PostgreSQL DDL commands allows an object creator to achieve denial of service against ALTER and… 4.3 Medium CVE-2026-6464 Untrusted data inclusion in PostgreSQL psql COPY may allow a server administrator to elicit execution of data lines as… 8.1 High
Track this CVE