This vulnerability is a stack buffer overflow in PostgreSQL's argument name matching mechanism for OUT parameters. It allows an attacker with object creation privileges to write limited bytes (0x0 and 0x1) to the stack, potentially causing denial of service or other availability impacts. The vulnerability affects PostgreSQL versions before 18.6, 17.11, 16.15, 15.19, and 14.24. The CVSS 3.1 base score is 8.2, indicating high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to integrity and availability. No known exploits in the wild have been reported. Patch status is not explicitly confirmed in the provided data, but the affected version ranges suggest that fixed versions start at 18.6, 17.11, 16.15, 15.19, and 14.24 respectively.

The vulnerability allows an attacker who can create objects in PostgreSQL to cause a stack buffer overflow by manipulating OUT parameter counts. This can lead to limited arbitrary writes (0x0 and 0x1 bytes) on the stack, potentially resulting in denial of service or other impacts on availability. There is no reported impact on confidentiality or system integrity beyond limited integrity impact. No active exploitation is known.

Since the vulnerability affects versions prior to 18.6, 17.11, 16.15, 15.19, and 14.24, upgrading PostgreSQL to these or later versions is recommended to remediate the issue. No explicit vendor advisory or patch links are provided, so users should consult official PostgreSQL release notes or security advisories for confirmation and apply the official fixes accordingly. No other mitigation guidance is available from the provided data.