This vulnerability involves an integer wraparound in PostgreSQL server components that results in undersized memory allocation followed by out-of-bounds writes. An unprivileged database user can exploit this to execute arbitrary code as the OS user running PostgreSQL. Additionally, applications passing gigabyte-scale inputs to these functions may cause segmentation faults. The issue affects multiple PostgreSQL versions prior to the specified fixed releases. Red Hat advisories confirm the vulnerability and provide security updates addressing it.

Successful exploitation can lead to arbitrary code execution with the privileges of the operating system user running the PostgreSQL server, representing a high-impact security risk. Additionally, applications providing very large inputs to the affected database functions may experience crashes (segmentation faults), potentially causing denial of service.

Security updates fixing this vulnerability are available in PostgreSQL versions 18.4, 17.10, 16.14, 15.18, and 14.23 and corresponding Red Hat Enterprise Linux packages. Users should apply these official patches promptly to remediate the issue. Refer to the Red Hat advisories linked for detailed update instructions. No indication exists that this vulnerability is mitigated without applying these updates.