This vulnerability involves a buffer over-read in the PostgreSQL function pg_restore_attribute_stats(). When this function processes array values with lengths that do not match expected sizes, it reads past the end of one array during query planning. This can lead to information disclosure by allowing a table maintainer to infer memory values beyond the array boundary. The issue affects PostgreSQL major version 18, specifically versions before 18.4. Earlier major versions are not impacted. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low complexity, requiring low privileges, and resulting in limited confidentiality impact without integrity or availability effects.

The vulnerability allows an authenticated user with table maintainer privileges to infer memory contents beyond the intended array boundary during query planning. This could lead to limited information disclosure. There is no indication of integrity or availability impact. The vulnerability is limited to PostgreSQL 18 versions before 18.4. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or remediation level is provided, users should monitor PostgreSQL advisories for updates. Until a fix is available, restricting table maintainer privileges to trusted users may reduce risk.