This vulnerability (CVE-2026-33816) in the pgproto3 subpackage of github.com/jackc/pgx/v5 is classified under CWE-697 (Incorrect Comparison) and CWE-787 (Out-of-bounds Write). It is a memory-safety issue that could allow an attacker to compromise system confidentiality, integrity, and availability. The CVSS 3.1 base score is 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating it is remotely exploitable without privileges or user interaction and can cause severe impact. The affected version is exactly 0, with no further version details provided. Red Hat advisories list this CVE among others and have issued errata referencing fixes, but the direct patch status for this specific vulnerability in the pgx package is not explicitly stated in the advisory content provided.

The vulnerability allows remote attackers to potentially execute arbitrary code or cause denial of service due to memory safety violations in the affected package. The high CVSS score reflects the possibility of full system compromise, including loss of confidentiality, integrity, and availability. No known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Multiple Red Hat advisories reference this CVE, suggesting that fixes may be included in Red Hat product updates. Users should monitor Red Hat security errata and update affected packages accordingly once patches are released. Until then, consider restricting network access to vulnerable services if feasible.