CVE-2026-6664

PgBouncer integer overflow in PgBouncer network packet parsing PUBLISHED

Description (CNA)

An integer overflow in network packet parsing code in PgBouncer before 1.25.2 bypasses a boundary check and can lead to a crash. An unauthenticated remote attacker can crash PgBouncer with a malformed SCRAM authentication packet.

Affected (CNA)

Vendor / product	Versions
n/a / PgBouncer	affected 0 before 1.25.2

CWE

CWE-190

References

https://www.pgbouncer.org/changelog.html#pgbouncer-125x

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.