CVE-2026-14668 — PostgreSQL ctid type confusion in selectivity estimator discloses derivative of arbitrary read

CVE-2026-14668

PostgreSQL ctid type confusion in selectivity estimator discloses derivative of arbitrary read PUBLISHED

Description (CNA)

Type confusion regarding input of PostgreSQL ctid data type selectivity estimator allows an object creator to view a calculation derived from the value of an arbitrary 4-byte span of memory, via a chosen non-ctid input. While the calculation loses precision, substantial memory value recovery appears possible. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.

Affected (CNA)

Vendor / product	Versions
n/a / PostgreSQL	affected 18 before 18.6; affected 17 before 17.11; affected 16 before 16.15; affected 15 before 15.19; affected 0 before 14.24

CWE

CWE-843

References

https://www.postgresql.org/support/security/CVE-2026-14668/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.