CVE-2026-6665 — PgBouncer buffer overflow in SCRAM

CVE-2026-6665

PgBouncer buffer overflow in SCRAM PUBLISHED

Description (CNA)

The SCRAM code in PgBouncer before 1.25.2 did not check the return value of strlcat() correctly when building the contents of the SCRAM client-final-message. A malicious backend that sends a SCRAM server-final-message with a long nonce can trigger a stack overflow.

Affected (CNA)

Vendor / product	Versions
n/a / PgBouncer	affected 0 before 1.25.2

CWE

CWE-121

References

https://www.pgbouncer.org/changelog.html#pgbouncer-125x

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.