This vulnerability involves a stack buffer overflow in PostgreSQL's argument name matching mechanism. Specifically, an object creator can trigger the overflow through manipulation of the OUT parameter count. The overflow is limited to writing bytes 0x0 and 0x1. Affected versions are those prior to PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24. No official remediation level or patch links are provided in the data, and no known exploits in the wild have been reported.

The vulnerability allows an attacker with object creation privileges to cause a stack-based buffer overflow, which can lead to denial of service or potentially other impacts related to integrity and availability. The CVSS vector indicates no confidentiality impact but low complexity, no privileges required, no user interaction, and high impact on availability with limited impact on integrity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official remediation level or patch links are provided, users should monitor PostgreSQL vendor advisories for updates and apply any patches once available. Until then, restricting object creation privileges may reduce risk.