CVE-2026-33815 is a memory-safety vulnerability classified under CWE-129 (Improper Validation of Array Index) affecting the github.com/jackc/pgx/v5/pgproto3 package. This vulnerability can lead to out-of-bounds memory access, potentially causing crashes or arbitrary code execution. The CVSS 3.1 base score is 9.8 (Critical), with network attack vector, low attack complexity, no privileges or user interaction required, and full impact on confidentiality, integrity, and availability. Red Hat advisories list this CVE among multiple security issues addressed in Red Hat Edge Manager and related products, but do not explicitly state the patch status or remediation level. The vulnerability is acknowledged and tracked in multiple Red Hat errata, indicating vendor awareness and ongoing mitigation efforts.

Successful exploitation of this vulnerability can result in complete compromise of affected systems due to memory corruption, including unauthorized disclosure, modification, or destruction of data, and denial of service. The critical CVSS score reflects the potential for remote exploitation without authentication or user interaction. No known active exploits have been reported yet.

Patch status is not yet confirmed — check the Red Hat advisories linked for current remediation guidance. Multiple Red Hat errata reference fixes for this vulnerability, suggesting that updates are available for affected Red Hat products. Users should monitor the vendor advisories at https://access.redhat.com/security/cve/CVE-2026-33815 and apply relevant security updates promptly once confirmed. No vendor advisory explicitly states 'no action required' or 'already mitigated.'