This vulnerability involves a buffer over-read in the pg_trgm index picksplit function of PostgreSQL. Specifically, the function reads beyond the allocated heap buffer boundary, potentially leaking limited memory information. The issue could allow a user with table maintainer privileges to infer some memory values based on index split behavior. The affected versions are those prior to PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24. No official remediation level or patch information is provided in the source data.

An attacker with table maintainer privileges might infer limited memory values due to the buffer over-read, potentially leading to information disclosure. There is no indication of integrity or availability impact. The vulnerability requires network access with low complexity and no user interaction, but privileges are required. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until official patches or updates are released, limit table maintainer privileges to trusted users only to reduce risk.