CVE-2026-18022 — pgvector buffer overflow via integer wraparound in IVFFlat index build on 32-bit systems

CVE-2026-18022

pgvector buffer overflow via integer wraparound in IVFFlat index build on 32-bit systems PUBLISHED

Description (CNA)

Integer wraparound in IVFFlat index build in pgvector before 0.8.6 allows a database user to write data out-of-bounds, which could lead to arbitrary code execution. Only 32-bit systems are affected.

Affected (CNA)

Vendor / product	Versions
n/a / pgvector	affected 0 before 0.8.6

CWE

CWE-190, CWE-787

References

https://github.com/pgvector/pgvector/issues/1006
https://github.com/pgvector/pgvector/commit/636a92a3395d2e036ffd40d07aeb400a708ae104

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.