CVE-2026-14679 — PostgreSQL stack buffer overflow in argument match writes 0x0 and 0x1 to server memory

CVE-2026-14679

PostgreSQL stack buffer overflow in argument match writes 0x0 and 0x1 to server memory PUBLISHED

Description (CNA)

Stack buffer overflow in PostgreSQL argument name matching allows an object creator to achieve unknown impacts via OUT parameter count. The attack can write only 0x0 and 0x1 bytes. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.

Affected (CNA)

Vendor / product	Versions
n/a / PostgreSQL	affected 18 before 18.6; affected 17 before 17.11; affected 16 before 16.15; affected 15 before 15.19; affected 0 before 14.24

CWE

CWE-121

References

https://www.postgresql.org/support/security/CVE-2026-14679/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.