CVE-2026-6575 Details
Description
Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array. This allows a table maintainer to infer memory values past that array end. Within major version 18, minor versions before PostgreSQL 18.4 are affected. Versions before PostgreSQL 18 are unaffected.
A buffer over-read vulnerability has been identified in the PostgreSQL function pg_restore_attribute_stats(). This issue arises because the function accepts array values of mismatched lengths, leading to query planning that reads beyond the end of one array. As a result, a table maintainer could potentially infer memory values past the array's boundary. This vulnerability affects PostgreSQL major version 18, minor versions prior to 18.4. Versions before PostgreSQL 18 are not affected.
Users can upgrade to PostgreSQL version 18.4 to address this vulnerability. Instructions for upgrading can be found in the PostgreSQL versioning policy.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed May 14, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.postgresql.org/support/security/CVE-2026-6575/ | PostgreSQL | PatchVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-126 | Buffer Over-read | PostgreSQL |
Affected Products
| Product | Versions |
|---|---|
| postgresql postgresql | >= 18.0, < 18.4 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | PostgreSQL |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 18, 2026 | Initial Analysis | [email protected] |
| May 14, 2026 | New CVE Received | PostgreSQL |