PT-2025-46824 · Unknown+9 · Postgresql+8
Published
2025-11-13
·
Updated
2026-03-30
·
CVE-2025-12818
CVSS v3.1
5.9
Medium
| Vector | AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
PostgreSQL versions prior to 18.1
PostgreSQL versions 13.23 and earlier
PostgreSQL versions 14.20 and earlier
PostgreSQL versions 15.15 and earlier
PostgreSQL versions 16.11 and earlier
PostgreSQL versions 17.7 and earlier
Description
An integer wraparound issue exists in the libpq client library of PostgreSQL. This flaw allows an attacker to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes, potentially leading to a segmentation fault and application crash.
Recommendations
Update PostgreSQL to a version prior to 18.1.
Update PostgreSQL to a version prior to 17.7.
Update PostgreSQL to a version prior to 16.11.
Update PostgreSQL to a version prior to 15.15.
Update PostgreSQL to a version prior to 14.20.
Update PostgreSQL to a version prior to 13.23.
Fix
DoS
RCE
Integer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Debian
Linuxmint
Postgresql
Red Os
Rocky Linux
Suse
Ubuntu
Libpq